Lock Down SSH

Now that I have root-level access on my Web server, I’m going to make sure these are all taken care of as the last thing I need is somebody compromising my Web server. Link via Neil.

Comments

The only one of those I didn’t find as common sense was the SSH v1 compatability mode.
So far as secret keys, she just needs to have different secret keys from each incoming machine. I use this setup and it works hokay.. but only for script-in accounts which can’t type passwords. 😉