What you should do in your first 5 mins of a new server install

#1

Post by 7imbrook » Wed, Mar 16, 2016, 5:08 PM UTC

What you should do in your first 5 mins of a new server install
engineering.timbrook.im

Re: What you should do in your first 5 mins of a new server install

#2

Post by gravypod » Wed, Mar 16, 2016, 5:12 PM UTC

I'm a big proponent of changing the SSH port. That right there makes life a lot easier when dealing with brute force attempts.

You can also make an IP tables taste limit on that port.

Re: What you should do in your first 5 mins of a new server install

#3

Post by 7imbrook » Wed, Mar 16, 2016, 5:22 PM UTC

gravypod wrote: post #2

I'm a big proponent of changing the SSH port. That right there makes life a lot easier when dealing with brute force attempts. You can also make an IP tables taste limit on that port.

My only excuse for not changing port is workflow, needing to add the flag or : on the address is too much :P

Re: What you should do in your first 5 mins of a new server install

#4

Post by detaro » Wed, Mar 16, 2016, 5:39 PM UTC

7imbrook wrote: post #3

gravypod wrote: post #2

I'm a big proponent of changing the SSH port. That right there makes life a lot easier when dealing with brute force attempts. You can also make an IP tables taste limit on that port.

My only excuse for not changing port is workflow, needing to add the flag or : on the address is too much :P

that's what the .ssh/config file is for

Re: What you should do in your first 5 mins of a new server install

#5

Post by gravypod » Wed, Mar 16, 2016, 5:41 PM UTC

7imbrook wrote: post #3

gravypod wrote: post #2

I'm a big proponent of changing the SSH port. That right there makes life a lot easier when dealing with brute force attempts. You can also make an IP tables taste limit on that port.

My only excuse for not changing port is workflow, needing to add the flag or : on the address is too much :P

You can define globals on your machine.

ssh $main or ssh $mail

Makes it even easier, don't need to remember domain, port, or user.

Re: What you should do in your first 5 mins of a new server install

#6

Post by gravypod » Wed, Mar 16, 2016, 5:42 PM UTC

detaro wrote: post #4

7imbrook wrote: post #3

Earlier quoted context omitted.

My only excuse for not changing port is workflow, needing to add the flag or : on the address is too much :P

that's what the .ssh/config file is for

Wow, I never knew that was possible from the SSH config [0]. Thanks for the pointer! Time to update all of my settings!

[0] - http://www.cyberciti.biz/faq/create-ssh-config-file-on-linux...