Skip to content
Multi Doc

Hardening SSH

ubah port default ssh dari port 22

Terminal window
sudo nano /etc/ssh/sshd_config

complete code

/usr/games
# This is the sshd server system-wide configuration file.  See
# sshd_config(5) for more information.


# The strategy used for options in the default sshd_config shipped with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented.  Uncommented options override the
# default value.


Include /etc/ssh/sshd_config.d/*.conf


#Port 22
Port 721
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::


#HostKey /etc/ssh/ssh_host_rsa_key
#HostKey /etc/ssh/ssh_host_ecdsa_key
#HostKey /etc/ssh/ssh_host_ed25519_key


# Ciphers and keying
#RekeyLimit default none


# Logging
#SyslogFacility AUTH
LogLevel VERBOSE


# Authentication:


#LoginGraceTime 2m
PermitRootLogin no
#StrictModes yes
MaxAuthTries 3
MaxSessions 2


PubkeyAuthentication yes


# Expect .ssh/authorized_keys2 to be disregarded by default in future.
#AuthorizedKeysFile  .ssh/authorized_keys .ssh/authorized_keys2


#AuthorizedPrincipalsFile none


#AuthorizedKeysCommand none
#AuthorizedKeysCommandUser nobody


# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes


# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication yes
PermitEmptyPasswords no


# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
KbdInteractiveAuthentication no


# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no


# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
#GSSAPIStrictAcceptorCheck yes
#GSSAPIKeyExchange no


# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the KbdInteractiveAuthentication and
# PasswordAuthentication.  Depending on your PAM configuration,
# PAM authentication via KbdInteractiveAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and KbdInteractiveAuthentication to 'no'.
UsePAM yes


AllowAgentForwarding no
AllowTcpForwarding no
GatewayPorts no
X11Forwarding no
#X11DisplayOffset 10
#X11UseLocalhost yes
#PermitTTY yes
PrintMotd no
#PrintLastLog yes
TCPKeepAlive no
#PermitUserEnvironment no
Compression no
ClientAliveInterval 300
ClientAliveCountMax 2
UseDNS no
#PidFile /run/sshd.pid
#MaxStartups 10:30:100
PermitTunnel no
#ChrootDirectory none
#VersionAddendum none


# no default banner path
#Banner none


# Allow client to pass locale environment variables
AcceptEnv LANG LC_*


# override default of no subsystems
#Subsystem  sftp  /usr/lib/openssh/sftp-server
Subsystem sftp internal-sftp


# Example of overriding settings on a per-user basis
#Match User anoncvs
#  X11Forwarding no
#  AllowTcpForwarding no
#  PermitTTY no
#  ForceCommand cvs server
Protocol 2

Ubah seting sshd otomatis

Terminal window
wget https://raw.githubusercontent.com/sdldev/server/main/ssh/sshd_config && sudo mv sshd_config  /etc/ssh/sshd_config && sudo chown root:root /etc/ssh/sshd_config && sudo chmod 644 /etc/ssh/sshd_config && sudo systemctl restart ssh && sudo reboot
atau
Terminal window
wget https://raw.githubusercontent.com/sdldev/server/main/ssh/sshd_config1 && sudo mv sshd_config1  /etc/ssh/sshd_config && sudo chown root:root /etc/ssh/sshd_config && sudo chmod 644 /etc/ssh/sshd_config && sudo systemctl restart ssh && sudo reboot
Download filenya disini

Upload/Download File dari Web Server via SSH MelaluiTerminal Linux

Untuk dapat melakukanya,Hal terpenting adalah kita mengetahui ip_address dan password dari web server yg akan kita eksekusi

sebagai contoh disini,ip_address web server adalah 192.168.200.253,nama host PC Lokal adalah cidara@cidara-dev dan nama host server adalah nanda@selaras

menggunakan metode scp

Upload File dari Local PC ke Web Server

Buka Terminal dan ketikkan perintah:

Terminal window
scp namafile username@ip_address:/home/username

sebagai contoh disini,kita akan mengupload file contoh.txt yg ada di direktori Documents ke web server

Download file dari server ke local PC

dapat dilakukan dengan menggunakan perintah:

Terminal window
scp username@ip_address:/home/username/namafile .

sebagai contoh disini,kita akan mendownload file contoh.txt yg ada di direktori home web server ke local PC

Anda juga dapat mengupload direktori ke web server

gunakan perintah:

Terminal window
scp -r sumber_dir username@ip_address:/home/username/tujuan_dir