[CentOS] ssh security

Fri Jun 19 17:29:23 UTC 2009
Frank Cox <theatre at sasktel.net>

On Fri, 19 Jun 2009 19:54:37 +0300 (AST)
Cisco-Education wrote:

> Now both the Mail server and the backup pc server behind firewall and ssh
> protocol is denied to the hosts in the DMZ zone

This statement is incorrect.  What you think you have set up isn't what you
actually have set up.  The outside world apparently has full access to your
ssh service; your firewall isn't blocking it at all.

The proper fix depends on your needs.  You should definitely fix the firewall;
then after that you can restrict access to sshd by IP address and username and
deny password access.

-- 
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com