[colug-432] SSH

[Michael Yanovich]

I really like the SSH aliases, especially for scp. It makes it easy to
transfer file remotely and even on my lan instead of having to remember
the IP address I can just plug it in there.

ssh home:/home/yano/Downloads/coolfile.txt .

On 03/10/2011 09:11 AM, Richard Holbert wrote:
> On 03/10/2011 08:51 AM, R P Herrold wrote:
>> On Wed, 9 Mar 2011, Richard Troth wrote:
>>
>>> port.  I hate it.  There are other ways to defend.  I may use one or
>>> more of them in the future (eg: maybe port knocking).
>> I find less cumbersome and better:  fail2ban
>> which permits adding 'whitelist ranges' so that one does not
>> lock oneself out
>>
>> and moving to certificate based authentication _only_ as to
>> external network access, totally disabling password based
>> access.  See a hardening outline I wrote at:
>>   	http://www.pmman.com/usage/hardening/
>>
>> I still need to write the last piece about the management of
>> the ssh_config file:
>>   	~/.ssh/config
>> but it solves almost all remaining secure authentiation needs
>>
>> -- Russ herrold
> Here's a sample of a simplified ~/.ssh/config file:
> 
> Host       hogwarts
> HostName   hogwarts.mom.uk
> Port       7777
> User       harry.potter
> 
> Host       home
> HostName   shire.dyndns.org
> Port       443
> 
> With this in place, you do not have to specify nonstandard port numbers 
> or different usernames. It also creates an alias for the remote host 
> name that can also be used with commands like scp and rsync. see the man 
> page for ssh_config for more settings.
> 
> Rick
> 
> 
> 
> _______________________________________________
> colug-432 mailing list
> colug-432 at colug.net
> http://lists.colug.net/mailman/listinfo/colug-432

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 899 bytes
Desc: OpenPGP digital signature
Url : http://lists.colug.net/pipermail/colug-432/attachments/20110310/d3b3ff0c/attachment-0001.bin