[SOLVED] ssh hardening !

[atec666]

with proxmox mail gateway is it possible to setup sshd_config without kiling cluster features an stuff etc ?

with those modifications :

PermitRootLogin prohibit-password
PubkeyAuthentication yes
PasswordAuthentication no
PermitEmptyPasswords no
ChallengeResponseAuthentication no

 

[dcsapak]

yes this should work, as long as passwordless ssh between the nodes work

 

[oguz]

you can also install fail2ban to stop brute-force attacks

 

[atec666]

you can also install fail2ban to stop brute-force attacks

Thank u for you answer.
i test it this night, it seems to work with those parameter.

 

[LnxBil]

you can also install fail2ban to stop brute-force attacks

and additionally only allow special IP addresses or ranges to connect to your service. Fail2ban is nice, but blocking 99,99% of the attack surface also works nice.

 

[atec666]

you should install firewall to preven bruce force

PMG (cluster) is behind a firewall ...