On Tue, 2005-12-06 at 20:58, Ben Halicki wrote: > Hi all, > > I'm planning on configuring SSH for remote administration and was just > wondering if anyone has a few tips on securing it. How secure is it to have > an SSH port open and accessible via the Internet? I'll be using key-based > authentication only and disabling password authentication. > > Any pointers would be greatly appreciated. > > Thanks, > > Ben Halicki > Key based authentication is the right way to go. You should disable root ssh access completely. And while it will not really improve your security you might consider using a different port for ssh. It will keep your log files much cleaner.
