Daabobo Awọn iwọle SSH pẹlu awọn ifiranṣẹ SSH & MOTD Banner


Ọkan ninu ọna ti o rọrun julọ lati daabobo ati ni aabo awọn iwọle SSH nipa fifihan ifiranṣẹ igbona si awọn olumulo ti a fun ni aṣẹ UN tabi ṣe afihan ikini kaabọ tabi awọn ifiranṣẹ alaye si awọn olumulo ti a fun ni aṣẹ.

Jije olutọju eto nigbakugba ti o tunto awọn olupin Linux Mo lo nigbagbogbo lati tunto awọn asia aabo fun awọn iwọle ssh. Ọpagun naa ni diẹ ninu alaye ikilọ aabo tabi alaye gbogbogbo. Wo ifiranṣẹ asia apẹẹrẹ mi eyiti Mo lo fun gbogbo awọn olupin mi.

Itaniji! O n wọle si agbegbe ti o ni aabo! IP rẹ, Akoko Iwọle, Orukọ olumulo ti ṣe akiyesi ati pe o ti firanṣẹ si olutọju olupin!
Iṣẹ yii ni ihamọ si awọn olumulo ti a fun ni aṣẹ nikan. Gbogbo awọn iṣẹ ṣiṣe lori eto yii ti wọle.
Wiwọle laigba aṣẹ yoo wa ni iwadii ni kikun ati ṣe ijabọ si awọn ile ibẹwẹ nipa ofin.

Ọna meji lo wa lati ṣe afihan awọn ifiranṣẹ ọkan ni lilo faili.net.net ati keji ni lilo faili MOTD.

  1. issue.net: Ṣe afihan ifiranṣẹ asia ṣaaju iṣaaju iwọle wiwọle ọrọigbaniwọle.
  2. motd: Han ifiranṣẹ asia kan lẹhin ti olumulo ti wọle.

Nitorinaa, Mo gba iṣeduro niyanju gbogbo oludari eto lati ṣe afihan awọn ifiranṣẹ asia ṣaaju gbigba awọn olumulo laaye lati wọle si awọn eto. Kan tẹle ni isalẹ awọn igbesẹ ti o rọrun lati jẹki awọn ifiranṣẹ gedu SSH.

Han Ifiranṣẹ Ikilọ SSH si Awọn olumulo Ṣaaju Wiwọle

Lati ṣe afihan Ikini kaabọ tabi Ikilo ifiranṣẹ fun awọn olumulo SSH ṣaaju iwọle. A lo faili.net.net lati ṣafihan awọn ifọwọra asia kan. Ṣii faili atẹle pẹlu olootu VI.

# vi /etc/issue.net

Ṣafikun ifiranṣẹ apeere asia wọnyi ki o fi faili naa pamọ. O le ṣafikun eyikeyi ifiranṣẹ asia aṣa si faili yii.

###############################################################
#                                                      Welcome to TecMint.com                                                           # 
#                                   All connections are monitored and recorded                                         #
#                          Disconnect IMMEDIATELY if you are not an authorized user!                    #
###############################################################

Ṣii faili iṣeto ssh oluwa ki o mu awọn asia ṣiṣẹ.

# vi /etc/ssh/sshd_config

Wa ọrọ naa “Banner” ati uncomment jade laini ki o fi faili naa pamọ.

#Banner /some/path

O yẹ ki o jẹ bi eleyi.

Banner /etc/issue.net (you can use any path you want)

Nigbamii, tun bẹrẹ daemon SSH lati ṣe afihan awọn ayipada tuntun.

# /etc/init.d/sshd restart
Stopping sshd:                                             [  OK  ]
Starting sshd:                                             [  OK  ]

Bayi gbiyanju lati sopọ si olupin iwọ yoo wo ifiranṣẹ asia iru si isalẹ.

Han Ifiranṣẹ Ikilọ SSH si Awọn olumulo Lẹhin Wiwọle

Lati ṣe afihan awọn ifiranṣẹ asia lẹhin iwọle, a lo faili motd, eyiti o lo lati ṣe afihan awọn ifọwọra asia lẹhin iwọle. Bayi ṣii pẹlu olootu VI.

vi /etc/motd

Gbe ifiranṣẹ asia atẹle ki o fi faili naa pamọ.

###############################################################
#                                                   Welcome to TecMint.com                                                             # 
#                                    All connections are monitored and recorded                                       #
#                           Disconnect IMMEDIATELY if you are not an authorized user!                  #
###############################################################

Bayi tun gbiyanju lati buwolu wọle sinu olupin iwọ yoo gba awọn ifiranṣẹ asia mejeeji. Wo sikirinifoto ti o so ni isalẹ.