OpenBSD hardening


Installazione sicura dei servizi di rete (4/4)

            Port 22
            Protocol 2
            ListenAddress 1.2.3.4	
            HostKey /etc/ssh/ssh_host_key
            HostKey /etc/ssh/ssh_host_rsa_key
            HostKey /etc/ssh/ssh_host_dsa_key
            ServerKeyBits 2048 
            LoginGraceTime 120
            KeyRegenerationInterval 3600
            PermitRootLogin no
            IgnoreRhosts yes
            IgnoreUserKnownHosts yes
            StrictModes yes
            X11Forwarding no
            PrintMotd no
            PrintLastLog no 
            SyslogFacility AUTH
            LogLevel INFO
            RhostsAuthentication no
            RhostsRSAAuthentication no
            RSAAuthentication yes
            PasswordAuthentication yes
            PermitEmptyPasswords no
            UsePrivilegeSeparation yes
            PermitUserEnvironment no
            Compression yes
            UseDNS no