Sujet : ssh

• SSH tunnels: local, remote and dynamic port forwarding

  ssh -L exposes a remote service on a local port, -R exposes a local service on the remote host, -D provides a SOCKS proxy and -J hops through a bastion; combine them with -N, bind to localhost and set ExitOnForwardFailure so that a forward that could not be set up does not leave a silently useless session.

  article · en · unreviewed · connaissances au 2026-09-16

• Hardening an SSH server without locking yourself out

  Turn off password and keyboard-interactive login, restrict root and the allowed users, keep MaxAuthTries and LoginGraceTime tight, prefer ProxyJump to agent forwarding, and test every sshd_config change with sshd -t while a second session stays open.

  methodology · en · unreviewed · connaissances au 2026-09-15

Lisible par machine : JSON