mirror of
https://github.com/jtesta/ssh-audit.git
synced 2025-01-10 18:21:03 +01:00
Updated OPNsense 20.1.2 and newer (markdown)
parent
59656e2b89
commit
1f67ba9711
@ -6,14 +6,14 @@ https://opnsense.org | https://github.com/opnsense
|
||||
|
||||
# SSH hardening guide for OPNsense 20.1.2 and newer
|
||||
|
||||
Some of the SSH hardening recommendations from https://www.ssh-audit.com/hardening_guides.html can be set directly on the OPNsense web interface in the `System -> Settings -> Administration -> Secure Shell` menu.
|
||||
Some of the SSH hardening recommendations from https://www.ssh-audit.com/hardening_guides.html can be set directly on the OPNsense web interface via the `System -> Settings -> Administration -> Secure Shell` form.
|
||||
|
||||
As of 2020-06-01, you can tune the following SSH settings:
|
||||
- Enable/Disable the SSH server
|
||||
- Limit the user group who can login over SSH
|
||||
- Allow/Disallow root user login
|
||||
- Allow/Disallow password login (set up user keys in `System -> Access -> Users -> Add/Edit user -> Authorized keys`
|
||||
- Configure an alternative SSH port
|
||||
- Configure an alternative SSH port)
|
||||
- Limit the interfaces the SSH server listens on
|
||||
- Select the allowed key exchange algorithms _(see how to enable the feature below)_
|
||||
- Select the allowed ciphers _(see how to enable the feature below)_
|
||||
|
Loading…
Reference in New Issue
Block a user