User Tools
сервис_ssh
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_ssh [2024/02/08 10:54] val [SSH вместо VPN (привязка к порту сервера)] |
сервис_ssh [2025/01/20 14:47] (current) val [SSH вместо VPN (привязка к порту сервера)] |
||
|---|---|---|---|
| Line 2: | Line 2: | ||
| * [[http://ru.wikipedia.org/wiki/SSH|SSH (wikipedia)]] | * [[http://ru.wikipedia.org/wiki/SSH|SSH (wikipedia)]] | ||
| + | * [[https://habr.com/ru/articles/747080/|SSH с высоты птичьего полёта, или разгребаем кучи ключей]] | ||
| * [[https://www.serfish.com/console/|Web-based access to any SSH server]] | * [[https://www.serfish.com/console/|Web-based access to any SSH server]] | ||
| * [[http://linux.bolden.ru/ssh-tunnels/|Подробный анализ теории и практики использования SSH-туннелей]] | * [[http://linux.bolden.ru/ssh-tunnels/|Подробный анализ теории и практики использования SSH-туннелей]] | ||
| Line 40: | Line 41: | ||
| ===== Настройка ssh сервера ===== | ===== Настройка ssh сервера ===== | ||
| <code> | <code> | ||
| - | gate# cat /etc/ssh/sshd_config | + | gate# cat /etc/ssh/sshd_config.d/my.conf |
| </code><code> | </code><code> | ||
| - | ... | ||
| Port 2222 | Port 2222 | ||
| - | ... | + | |
| DenyUsers "user*" | DenyUsers "user*" | ||
| - | ... | + | |
| PermitRootLogin yes | PermitRootLogin yes | ||
| - | ... | + | |
| #KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1 | #KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1 | ||
| #HostkeyAlgorithms +ssh-dss,ssh-rsa | #HostkeyAlgorithms +ssh-dss,ssh-rsa | ||
| - | ... | + | #PubkeyAcceptedKeyTypes +ssh-dss,ssh-rsa |
| </code> | </code> | ||
| Line 62: | Line 62: | ||
| <code> | <code> | ||
| gate# ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key.pub | gate# ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key.pub | ||
| + | </code> | ||
| + | <code> | ||
| + | ubuntu24# systemctl edit ssh.socket | ||
| + | ... | ||
| + | [Socket] | ||
| + | ListenStream= | ||
| + | ListenStream=2222 | ||
| + | ... | ||
| + | ubuntu24# systemctl restart ssh.socket | ||
| </code> | </code> | ||
| Line 73: | Line 82: | ||
| $ mkdir .ssh/ | $ mkdir .ssh/ | ||
| - | $ cat .ssh/config | + | $ cat ~/.ssh/config |
| </code><code> | </code><code> | ||
| Host * | Host * | ||
| Line 88: | Line 97: | ||
| # StrictHostKeyChecking=no | # StrictHostKeyChecking=no | ||
| # LogLevel ERROR | # LogLevel ERROR | ||
| + | # HostKeyAlgorithms +ssh-rsa | ||
| + | # PubkeyAcceptedKeyTypes +ssh-rsa | ||
| </code> | </code> | ||
| Line 111: | Line 122: | ||
| ==== SSH вместо RCP (SCP) ==== | ==== SSH вместо RCP (SCP) ==== | ||
| + | ==== SCP ==== | ||
| <code> | <code> | ||
| $ scp -P 2222 val@radio.specialist.ru:/usr/local/www/apache22/data/unix/virus.zip . | $ scp -P 2222 val@radio.specialist.ru:/usr/local/www/apache22/data/unix/virus.zip . | ||
| server# scp switchN:running-config /srv/tftp/switchN-running-config | server# scp switchN:running-config /srv/tftp/switchN-running-config | ||
| + | deb12_ub24# scp -O switchN:running-config /srv/tftp/switchN-running-config | ||
| server# sshpass -p cisco scp switchN:running-config /srv/tftp/switchN-running-config | server# sshpass -p cisco scp switchN:running-config /srv/tftp/switchN-running-config | ||
| + | |||
| + | server# scp -3 192.168.X.101:/etc/docker/daemon.json gate:/etc/docker/daemon.json | ||
| </code> | </code> | ||
| Line 124: | Line 139: | ||
| <code> | <code> | ||
| - | www# cat /etc/ssh/sshd_config | + | # cat /etc/ssh/sshd_config |
| </code><code> | </code><code> | ||
| ... | ... | ||
| Line 131: | Line 146: | ||
| ... | ... | ||
| Match group user1 | Match group user1 | ||
| + | #Match group group1 | ||
| ChrootDirectory %h | ChrootDirectory %h | ||
| ForceCommand internal-sftp | ForceCommand internal-sftp | ||
| </code><code> | </code><code> | ||
| - | www# chown root ~user1/ | + | # chown root ~user1/ |
| - | www# mkdir ~user1/public_html | + | # mkdir ~user1/public_html && chown user1:user1 ~user1/public_html/ |
| - | www# chown -R user1:user1 ~user1/public_html/ | + | # mkdir ~user1/mail && chown user1:user1 ~user1/mail/ |
| </code> | </code> | ||
| Line 182: | Line 198: | ||
| </code><code> | </code><code> | ||
| # cat /proc/sys/net/ipv4/ip_local_port_range | # cat /proc/sys/net/ipv4/ip_local_port_range | ||
| + | или | ||
| + | # sysctl net.ipv4.ip_local_port_range | ||
| - | lan# ssh -N -R 61022:localhost:22 -o ServerAliveInterval=60 user1@server.corpX.un | + | lan# ssh -N -R 61022:localhost:22 -o ServerAliveInterval=5 -o ServerAliveCountMax=1 -o ExitOnForwardFailure=yes student@server.corpX.un |
| - | lan# ssh -N -R 3101:192.168.100+X.101:3389 user1@server.corpX.un | + | lan# ssh -N -R 61389:192.168.100+X.1NN:3389 student@server.corpX.un |
| + | |||
| + | mobaxterm> ssh -N -R 61389:localhost:3389 student@server.corpX.un | ||
| + | |||
| + | mobaxterm> ssh -N -R 0:localhost:5500 student@server.corpX.un | ||
| </code> | </code> | ||
| Line 195: | Line 217: | ||
| </code><code> | </code><code> | ||
| ... | ... | ||
| - | Match Address 192.168.X.1 | + | #AllowUsers root user*@10.5.*.* |
| + | ... | ||
| + | Match Address 192.168.*.*,172.16.*.* | ||
| PermitRootLogin yes | PermitRootLogin yes | ||
| </code> | </code> | ||
| Line 225: | Line 249: | ||
| <code> | <code> | ||
| - | node1:~# cat .ssh/config | + | node1:~# cat ~/.ssh/config |
| </code><code> | </code><code> | ||
| Host * | Host * | ||
сервис_ssh.1707378869.txt.gz · Last modified: 2024/02/08 10:54 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
