Updated OPNsense 20.1.2 and newer (markdown)

Immánuel! 2020-06-01 10:07:37 +02:00
parent 59656e2b89
commit 1f67ba9711

@ -6,14 +6,14 @@ https://opnsense.org | https://github.com/opnsense
# SSH hardening guide for OPNsense 20.1.2 and newer
Some of the SSH hardening recommendations from https://www.ssh-audit.com/hardening_guides.html can be set directly on the OPNsense web interface in the `System -> Settings -> Administration -> Secure Shell` menu.
Some of the SSH hardening recommendations from https://www.ssh-audit.com/hardening_guides.html can be set directly on the OPNsense web interface via the `System -> Settings -> Administration -> Secure Shell` form.
As of 2020-06-01, you can tune the following SSH settings:
- Enable/Disable the SSH server
- Limit the user group who can login over SSH
- Allow/Disallow root user login
- Allow/Disallow password login (set up user keys in `System -> Access -> Users -> Add/Edit user -> Authorized keys`
- Configure an alternative SSH port
- Configure an alternative SSH port)
- Limit the interfaces the SSH server listens on
- Select the allowed key exchange algorithms _(see how to enable the feature below)_
- Select the allowed ciphers _(see how to enable the feature below)_