Thread: SSH tunneling
View Single Post
Banana
is the next Chiquita
 
Join Date: Feb 2005
 
2007-08-10, 21:27

Sorry.

This is somehow out of context, because this was a comment responding to an article about setting up a SSH server for Windows.

Lemme see if I can try and explain it better....

sshd_config is a file located in /private/etc/

If you open that file with TextEdit, you can read it, and look for the parameters to modify...

So first thing you may find when you scan through that file is
Code:
#Protocol 2, 1
The above comment tells that you should change it to
Code:
#Protocol 2
to force SSH-2 connection and refuse any attempts to downgrade to older and weaker SSH-1 connection.

Scanning downward, you should find:
Code:
#ServerKeyBits 756
Replace the 756 with 2056 to increase the length of key, making it stronger.

Ditto with

Code:
#PermitRootLogin Yes
This is quite a surprise to me; I would have thought they knew better than to permit root login, so you definitely want to replace with a "No" to prevent this.

Finally, if you go to the line where it says
Code:
#PermitEmptyPasswords No
You would (and I'm not 100% positive here), add the line following:
Code:
#PermitEmptyPasswords No #AllowUsers MyUserName
Did that clarify?
  quote