Table of Contents

Introduction
Scale: Known configurations
Software Requirements
Configuration

Introduction

OpenSSH is a method for secure communications without access to the local console. OpenSSH is feature rich supporting many different authentication mechanisms. It can also allow users to completely bypass firewall configurations via tunneling.

Scale: Known configurations

  • Unknown.  Unknown

Software Requirements

Required packages
ServiceSoftware packageInstallation command
OpenSSH Serveropenssh-serveryum -y install openssh-server
OpenSSH Clientopenssh-clientsyum -y install clamav
denyhostsdenyhostsyum -y install denyhosts

Configuration

Required Config Lines
RequirementActionConfigComment
MustDefineProtocol 2
MustDefinePermitRootLogon no
MustDefineTCPKeepAlive yes
MustNot DefineProtocol 1
ShouldDefineX11Forwarding no
ShouldDefineAllowTcpForwarding no
ShouldDefineGatewayPorts no
ShouldDefinePermitTunnel no
ShouldDefineGSSAPIAuthenticationIf not using GSSAPI