0
votes
0answers
17 views

Instead of forwarding ports, is there a way to set up SSH on routers so I would have to login to my local network?

Instead of forwarding ports, is there a way to set up SSH on routers so I would have to login to my local network? I've been hacked, I think, and I'm no longer comfortable opening ports. Is there a ...
0
votes
0answers
8 views

Multihop SSH connections not showing up in lastlog

We all know that adding the following to your .ssh/config file will allow seamless ssh hopping through a gateway host: Host *.internal.workdomain.com ProxyCommand ssh gateway.workdomain.com nc %h ...
1
vote
0answers
17 views

How to manage SSH keys securely in Windows?

I currently have an SSH key I use to access both Bitbucket and my home server from my Windows laptop. The most convenient way I found to deal with the use of the private key was to just have pageant ...
1
vote
1answer
42 views

SSH tunnel through a workstation to a remote server

I have a situation that similar to what is posted here but not quite the same. I have access to a remote machine A that I connect to from a machine B using a private key with a passphrase. I'd like ...
0
votes
1answer
55 views

How do I ssh-add a protected key to ssh-agent for my Jenkins CI instances?

I manage a Jenkins CI server running on Ubuntu 14.04 with a few requirements: Jobs make use of public/private key authentication for security, so an identity must have been added to ssh-agent prior ...
1
vote
1answer
254 views

I received notices of multiple IPs blocked by SSH, should I be concerned?

I recently opened a Wordpress public page from my Synology NAS. Shortly after, I received two notices that different IP addresses (both from China) has been blocked by SSH. Should I be concerned?
0
votes
1answer
60 views

How do I specify the key exchange method in OpenSSH?

I'm trying to understand how OpenSSH decides what key exchange method to use. What I don't see is how to specify the method. In addition, I know every ssh server/client is required to support at least ...
0
votes
1answer
26 views

Debian SSH two step auth

How can I setup two step auth like two passwords ? On Debian 7 with latest SSH. And without using Google auth or something simillar.
0
votes
2answers
108 views

which unix or linux command is used to change root password of remote machine(Just an IP address) without using SSH Login

which unix or linux command is used to change root password of remote machine(Just an IP address)? Suppose I just have an IP address of the target machine which is on my network, But I do not know ...
9
votes
1answer
194 views

Security concerns of displaying ssh private key

I've made I huge mistake, or at least I think it is: I've "catted" my private SSH key cat ~/.ssh/id_rsa I'm now afraid that I've created a security hole, allowing other users to see my private key ...
0
votes
2answers
247 views

passwordless ssh using id_dsa.pub or id_rsa.pub or identity.pub not working

I have a solaris 8 box and im trying to authenticate using no password the user george onto a solaris 11. versions of ssh: solaris8: OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090607f ...
0
votes
0answers
270 views

Meaning of sshd's disconnection log messages

I got a series of messages like below in /var/log/secure and I'm curious about the numbers and the messages. Received disconnect from xxx.xxx.xxx.xxx: 11: Bye Bye Received disconnect from ...
1
vote
3answers
513 views

Why can't SSH tunneling be used for SIP VOIP encryption?

On http://www.voip-info.org/wiki/index.php?page_id=2716 it says "Note that SSH tunneling is not a viable method for VoIP media path encryption." Why can't SSH tunneling (as opposed to a VPN) be used ...
3
votes
3answers
71 views

Is SFTP without keys still better than FTP?

I have a question regarding SFTP and security. Is using SFTP without keys, still more secure (eg. encrypted) than plain FTP?
0
votes
1answer
249 views

How does one verify the PGP RSA and/or DSA checksum signatures for putty?

To verify the download integrity of putty, how is the best way to first verify the "SHA-512: (RSA sig) | (DSA sig)" PGP signature of these check-sum files for putty? (I am guessing "sig" means ...
0
votes
4answers
131 views

Are servers at risk of “hard drive bombs”?

While discussing the security of my home server with my friend, he pointed out to me that with his SSH access, he could write files and delete them, over and over, ad infinitum and that this would ...
0
votes
1answer
52 views

Why should I care to set up SSH for VNC?

Assuming that the content of the screen I operate on doesn't contain any sensitive information, does tunneling VNC (TightVNC) session through SSH makes my VNC server less prone to attacks and ...
0
votes
1answer
181 views

What's the best way to ensure security in multi-network?

I have the following setup: I have a server using XEN to run several virtual machines. All of them are connected to various (virtual or physical) networks. I have the internet (bad guys), a DMZ ...
0
votes
1answer
26 views

Solution dedicated to storing lots of ssh keys

Imagine you need to talk to many servers over internet and you need to keep the ssh keys and also relevant certificate of talking to different things (like a database on that server) of that server. ...
0
votes
1answer
802 views

How to Custom Folder Access when users Login using SFTP,SSH,SCP?

I have problem when I want to config my SSH server, I have username root and guest. I want root still can access SSH and for guest users , only can transfer file (copy and paste) some directory. in ...
0
votes
0answers
201 views

sshd : locale not set with `UsePam no`

I even did reinstallation for this thinking something was wrong, and here's what I've found. #usepam=no Using username "sysadmin". Authenticating with public key "rsa-key-20130918" sysadmin@ubuntu:~$ ...
16
votes
5answers
629 views

How risky it is to have a personal server with ssh opened to the Internet?

Title continuation would be “while having limited knowledge of Internet security”. I have recently set up a small server with a low end computer running debian with the aim to use it as a personal ...
1
vote
0answers
55 views

Information about a given DSA Key

Reading the answer http://superuser.com/a/13189/246855 to the question What is better for GPG keys - RSA or DSA?, I decided to examine the 2048 bit DSA key I use to figure out which secure hash ...
3
votes
2answers
89 views

Security considerations when running an SSH server

I'm trying to set up an SSH server which I can access from my home network only, not the Internet. It's running Ubuntu Linux. I've installed the ssh package, and I can start/stop the SSH server, and ...
0
votes
2answers
307 views

I want to open up my default SSH port (22) to see how many unauthorized access attempts I receive

I thought this would be a good place to ask this question: I want to open up my default SSH port (enable remote management in system settings and port forward my router) to see how many unauthorized ...
2
votes
1answer
440 views

Can I be a root certificate authority for my local network?

This may sound crazy, but can I be the root certificate authority? I mean, I have many computers and smart devices in my home. Remote Desktop warns for the certificate not being trusted, because it ...
0
votes
2answers
1k views

Using SSH Shortcut in Mac OS with a .ppk File

I'm working on setting up a shortcut to be able to SSH into my web development server. Here is what my config file looks like (different port and path to key in the real thing): Here is what ...
0
votes
1answer
27 views

Share sshd_config publicly?

I have an sshd_config file that I use for my Raspberry Pi, and I think it's pretty well locked down, but I'm curious is it's a bad idea for me to share it publicly like this, and if there is objective ...
1
vote
2answers
50 views

Remote shell account security

With a shell account like one of these http://shells.red-pill.eu, I would like to schedule chron jobs to backup from Google Drive to SugarSync. How secure are those servers? Can some obscure admin ...
2
votes
1answer
459 views

Was this a DoS, a hack attempt, or something else?

I ssh'd into my home server earlier because it was taking strangely long to respond to HTTP requests. I noticed that the shell prompt was also acting slow. So I typed top, and saw several instances of ...
1
vote
3answers
101 views

Security of a dial-up connection

If you have two machines with Windows XP, you can setup a "dial-up" connection between the two using a standard land phone line. I imagine the same can be done on Windows 7, and most other Operating ...
0
votes
0answers
136 views

Configuring port forwarding for SSH - no response outside LAN

I recently moved, and at the same time purchased a new router (Linksys E1200). Prior to the move, I had my old router set up to forward a port for SSH to servers on my LAN, and I was using DynDNS to ...
1
vote
1answer
157 views

SFTP access without hassle

I'm trying to provide access to a local folder for someone over the internet. After googling around a bit, I've come to the conclusion that SFTP is the safest thing to expose through the firewall to ...
3
votes
0answers
229 views

How to encrypt rsync communication? (rsyncd + stunnel, vs rsync over SSH, etc)

I don't know much about the specifics of rsync, SSH, stunnel, etc, but I'm looking for a way to make rsync backups, but the transfer of data over the network must be encrypted (the credentials, and ...
-1
votes
1answer
179 views

How to set up ssh for public key from any machine

I have a Mac running Lion at home. I disabled password ssh login; I just want to use public key. I generated private/public key pair, but now I'm confused. I start a new job tomorrow, and want to ...
5
votes
2answers
174 views

How do I prevent all console access except via key-authenticated SSH?

I have a server environment for which the only methods of login would be SSH or local terminal in the datacenter. I have set this up to allow a specific user to login only with a key, not password ...
1
vote
1answer
70 views

Information flow in Linux - how to tell who is currently active and typing?

I'm currently playing a mafia/werewolves game with my cyber-security class. The basic idea is: on one machine, the moderator starts a server program all the players ssh into the machine and launch ...
1
vote
0answers
103 views

Proxy inside SOCKS 5 proxy

There's a secure LAN with a computer in it. This computer is configured with automatic proxy settings. A .pac file is used for this. With this automatic proxy configuration the computer can reach all ...
0
votes
1answer
698 views

Performing local security checks with OpenVAS 5 from Backtrack 5 r3

I'm trying to perform local security checks using OpenVAS on a remote machine, from my Backtrack5r3 machine. I have followed the official OpenVAS guide Howto: Perform local security checks and I have ...
1
vote
1answer
1k views

Does having an SSL certificate make ssh/sftp connections any more automatic?

When I log in to a new machine (or from a new machine) using ssh/sftp, I get prompted with the "here's this random string of hex digits; should I trust it?" question. And, since I never have the ...
2
votes
1answer
121 views

Should you disable SSH login with root on your server? [closed]

Someone told me to disable SSH login with root for security reasons. Might I ask, why is this necessary, exactly? Wouldn't setting a very long (20+ chars long), full-printable-ASCII range, random ...
0
votes
3answers
4k views

How do I ssh-login into my Mac as root?

For some reason I can't login as root into my Mountain Lion 10.8.2. I've already edited /private/etc/sshd_config file by removing the comment from PermitRootLogin yes and restarted Mac. Still it ...
0
votes
2answers
196 views

Run a python script for entering RSA passphrases for Unix systems

I would like to know if is there a way to put a new "Layer" when the SO(preferentially a Ubuntu or a Mac OS X) asks for the passphrase of a rsa key. How it normally does: Use ssh; prompt the window ...
-3
votes
1answer
65 views

Compromised RSA key - unsure of the scope of the issue

So, I have no experience here, but what sorts of problems can be caused by a compromised private RSA key? Is this even that big of a deal? I'm getting very little specific info on Google. :(
2
votes
3answers
436 views

Is it insecure to leave open an SSH connection?

I am running an Ubuntu Virtual server at a remote location, and several people have SSH access to the server for reasons of web-dev and other various things. When I setup the server I set various ...
9
votes
1answer
4k views

How do I extract fingerprints from .ssh/known_hosts?

My laptop has a well-populated .ssh/known_hosts file. I'd like to leverage that when connecting to remote hosts from my desktop, since tracking down the fingerprints can be a real chore. However, I ...
1
vote
1answer
245 views

SSH tunneling commands for better security and privacy

i have a centos 6 VPS. I use ssh -p 443 -D 8080 -f -C -N root@ip on mac terminal for SSH tunneling but with wireshark when i sniff my traffic i can see DNS requests are not encrypted ! (i use ...
12
votes
5answers
2k views

Stopping people from ssh(ing) into my Ubuntu machine

I want to be able to stop people from been able to SSH onto my machine but still need to SSH out, is this possible?
1
vote
1answer
110 views

Strategies in protecting your SSH keys in case of laptop theft

Is there any cool tool that encrypts your ssh keys and locks it down when you shutdown or put your computer to sleep? So in case someone steals your laptop, they can't get into your servers etc.?
0
votes
2answers
103 views

If I scp a file through an intermediate server, is the file stored temporarily on the server?

For the sake of simplicity (I find it easier to remember names than arbitrary letters), I will dispense with letters and use names to refer to the machines in this scenario. Say I have two machines, ...