How to secure your SSH.

 
1. Permanently stop and disable ssh services (ubuntu)

command: sudo systemctl stop ssh
                sudo systemctl disable ssh
                sudo systemctl status ssh

To check if ports 22 still open after disable ssh
command : sudo lsof -i:22

* Please run this command from server terminal in nutanix web
reference -: https://www.cyberciti.biz/faq/howto-start-stop-ssh-server/ 

2. Reject all IP & accept ssh connection only by allow IP Address
reference-: https://docs.rackspace.com/support/how-to/restrict-ssh-login-to-a-specific-ip-or-host/

3. Using knockd filter ssh connection by knock port
reference-: https://www.linuxbabe.com/security/secure-ssh-service-port-knocking-debian-ubuntu

4. Using passwordless SSH login
reference-: https://www.linuxbabe.com/linux-server/setup-passwordless-ssh-login

Comments

Post a Comment

Popular posts from this blog

BAGI MAKLUMAN PEMEGANG SIJIL KEMAHIRAN MALAYSIA(SKM)SAHAJA.. 1. Adakah sijil kemahiran malaysia diiktraf atau di perakui oleh MQA (pengiktrafan kerajaan) atau badan professional seperti BEM,IEM,IEEE ? adakah sijil kemahiran malaysia diiktraf oleh universiti2 antarabangsa untuk tujuan sambung belajar? Jawapan: Untuk makluman, terdapat tiga sektor di dalam Kerangka Kelayakan Malaysia (MQF) iaitu sektor kemahiran, sektor vokasional dan teknikal dan sektor pengajian tinggi. Rujuk MQF di Lampiran A. Sektor vokasional dan teknikal serta pengajian tinggi adalah di bawah bidang kuasa Agensi Kelayakan Malaysia (MQA) manakala bagi sektor kemahiran adalah di bawah bidang kuasa Jabatan Pembangunan Kemahiran (JPK). Ini adalah berdasarkan akta kedua-dua agensi iaitu Akta Agensi Kelayakan Malaysia 2007 (Akta 679) dan Akta Pembangunan Kemahiran Kebangsaan 2006 (Akta 652). Program latihan dan persijilan di bawah sektor kemahiran adalah tidak memerlukan proses akreditasi/ pengiktirafan MQA. MQA dan JPK
Read more

List Of MSI Motherboard with type of Processor Slot

Company name: MSI List of MSI motherboards: Slot 1 motherboards BX Master (MS-6163) MS-6119 MS-6120 MS-6147 MS-6156VA MS-6163 Pro (MS-6163Pro) MS-6163VA MS-6183 MS-6183E MS-6199VA Slot A motherboards K7 Pro (MS-6195) MS-6191 Socket 1156 motherboards Big Bang-Fuzion Big Bang-Trinergy H55-G43 H55-GD65 H55M-E21 H55M-E32 H55M-E33 H55M-ED55 H55M-P31 H55M-P33 H57M-ED65 P55-CD53 P55-GD55 P55-GD61 P55-GD65 P55-GD65 USB3 P55-GD80 P55-GD85 P55A Fuzion P55A-G55 P55A-GD55 P55A-GD65 P55M-GD41 P55M-GD45 Socket 1366 motherboards Big Bang-XPower Eclipse Plus Eclipse SLI X58 Platinum X58 Platinum SLI X58 Pro X58 Pro SLI X58 Pro-E X58 Pro-E USB3 X58A-GD65 X58M Socket 370 motherboards 694 Master (MS-6309) 694D Master (MS-6362) 694D Pro (MS-6321) 694D Pro2 (MS-6321) 694T Pro (MS-6309) 815 Pro (MS-6326) 815E Pro (MS-6337) 815EM pro (MS-6315) 815EP Pro (MS-6337) 815EPT Pro (MS-6337) 815ET Pro (MS-6337) 815M Pro (MS-6334) MS-6153 MS-6153VA MS-6154VA MS-6178 MS-6178E MS-6198 MS-6309 MS-6309 Lite (MS-6309 Ver2
Read more

How to resize and extend centos 7 disk manually

 How to resize and extend centos 7 disk manually Resizing The Partition You need to modify the   Linux   partition table within the   virtual machine   to recognize that the disk size has changed. This can be done using the   fdisk   utility, which is a partition editor. For the   virtual machine   provided by Nagios Enterprises: sda1   is used for the   boot   partition sda2   is the device for all logical volumes, this is the partition you need to edit Start   fdisk   by executing the following command: fdisk /dev/sda   You should print the current partition table so you can keep track of your changes as you go: Command (m for help): p Take a screenshot or copy the screen contents into a text file in case you want to reference it later. To resize a partition, you actually "delete" it and then add a new one with the new size, making sure to place the beginning of the new partition at the same sector/cylinder as the old one started. This process is NOT destructive, your data
Read more