Zano rinonakidza rekuvandudza kuchengetedza kweSSH

Ino nguva tichaona a pfupi uye yakapusa muromo izvo zvichatibatsira kuvandudza Seguridad yeedu kure kure kubatana ne SSH.

OpenSSH, inova pasuru yakapihwa neGNU / Linux masisitimu ekubata SSH kubatana, ine dzakasiyana siyana sarudzo. Kuverenga bhuku SSH Iyo Yakachengeteka Shell uye iwo emanyorero mapeji ini ndawana iyo -F sarudzo, iyo inotaurira SSH mutengi kuti ashandise rakasiyana gadziriso faira pane iro rinowanikwa nekusarudzika mune / etc / ssh dhairekitori.

Tinoshandisa sei iyi sarudzo?

Izvi zvinotevera:

ssh -F / nzira / to_your / configuration / file user @ ip / host

Semuenzaniso, kana isu tine tsika yekumisikidza faira inonzi my_config paDesktop, uye isu tinoda kubatana nemushandisi Carlos kukomputa ine ip 192.168.1.258, ipapo isu taizoshandisa rairo seinotevera:

ssh -F ~ / Desktop / my_config carlos@192.168.1.258

Inobatsira sei chengetedzo yekubatana?

Yeuka kuti anorwisa ari mukati medhu system anozoedza nekukurumidza kuwana mukana wevatariri kana asati atova nawo, saka zvingave zviri nyore kwaari kuti aite ssh yekubatanidza kune ese mamwe michina pane network. Kuti tidzivise izvi, tinogona kumisikidza iyo / etc / ssh / ssh_config faira ine zvisiri izvo, uye kana tichida kubatana neSSH tinoshandisa iyo yekumisikidza faira iyo yatichange tachengeta munzvimbo yatinoziva chete (kunyangwe kune zvekunze mudziyo wekuchengetera), ndokuti, taizochengetedzwa nerima. Nenzira iyi anorwisa angashamisika kuona kuti haakwanise kubatanidza achishandisa SSH uye kuti anoedza kugadzira zvinongedzo zvinoenderana nezvakatsanangurwa mufaera rekumisikidza, saka zvichamunetsa kuti azive zviri kuitika, uye isu zvinomunetsa kwazvo basa racho.

Izvi zvakawedzerwa kushandura chiteshi chekuteerera cheSSH server, kudzima SSH1, tsanangura kuti ndevapi vashandisi vanogona kubatanidza kuseva, zvinonyatso bvumidza iyo IP kana huwandu hweIPs hunogona kubatanidza kuseva uye mamwe matipi atinogona kuwana mukati http://www.techtear.com/2007/04/08/trucos-y-consejos-para-asegurar-ssh-en-linux ivo vachatibvumidza isu kuti tiwedzere iko kuchengetedzeka kweedu SSH kubatana.

Zvese zvinotsanangurwa pamusoro zvinogona kuitwa mune imwechete tambo. Kune yangu kuravira zvingave zvinonetesa kuve nekunyora tambo hombe ine akawanda sarudzo nguva dzese patinoedza kupinda mukati neSSH kune pc iri kure, semuenzaniso zvinotevera zvingave semuenzaniso weizvo zvandiri kukuudza:

ssh -p 1056 -c blowfish -C -l carlos -q ini 192.168.1.258

-p Inotsanangura chiteshi chekubatanidza kune iri kure inomiririra.
-c Inotsanangura kuti musangano wacho unofanirwa sei kunyorwa.
-C Inoratidza kuti chikamu chinofanira kumanikidzwa.
-l Inoratidza mushandisi yekupinda mairi kunzvimbo yekure kure.
-q Inoratidza kuti mameseji ekuongorora akadzvanywa.
-i Inoratidza iyo faira kuti ionekwe ne (yakavanzika kiyi)

Isu tinofanirwa zvakare kuyeuka kuti isu tinogona kushandisa nhoroondo yeiyo terminal kuti tirege kunyora mhando yese nguva dzese patinenge tichida icho, chimwe chinhu icho anorwisa anogona zvakare kushandisa mukana, saka ini handingazvikurudzire, zvirinani mukushandiswa kwe SSH kubatana.

Kunyangwe iyo yekuchengetedza nyaya isiri iyo yega mukana weiyi sarudzo, ini ndinogona kufunga nezvevamwe, senge kuve nefaira rekumisikidza yega yega sevha yatinoda kubatana nayo, saka tichadzivirira kunyora sarudzo nguva dzese dzatinoda kubatana sevha SSH ine yakatarwa gadziriso.

Uchishandisa iyo -F Sarudzo inogona kubatsira zvakanyanya kana iwe uine akati wandei maseva ane akasiyana magadziriso. Zvikasadaro, ese marongero anozofanirwa kuyeukwa, izvo zvisingaite. Mhinduro yacho ingave yekumisikidza faira rakagadzirirwa zvakakwana zvinoenderana nezvinodiwa neserver yega yega, kufambisa uye kuona kupinda kune iwo maseva.

Mune ino link http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config Iwe unogona kutsvaga maitiro ekugadzirisa iyo SSH mutengi yekumisikidza faira.

Rangarira ichi chingori chidimbu chimwe chete chemazana chatingawana kuve nechokwadi cheSSH, saka kana iwe uchida kuve nechengetedzo yekubatana kure kure unofanirwa kusanganisa pakati pezviitiko izvo OpenSSH inotipa.

Izvo ndezve izvozvi, ndinovimba ruzivo urwu rwuchakubatsira iwe uye kumirira imwe posvo nezve SSH chengetedzo svondo rinouya.