如何防止SSH暴力破解

发布网友 发布时间：2022-04-24 02:23

我来回答

共1个回答

热心网友 时间：2023-10-21 19:05

SSH防暴力破解的解决方法：

1、禁止root用户ssh登陆；

1.1、修改PermitRootLogin项：

[root@localhost ~]# vi /etc/ssh/sshd_config  

[root@localhost ~]# grep Root /etc/ssh/sshd_config  

PermitRootLogin no      ### 将默认的  #PermitRootLogin yes 修改成这样的 ###  

# the setting of "PermitRootLogin without-password".  

[root@localhost ~]# vi /etc/ssh/sshd_config
[root@localhost ~]# grep Root /etc/ssh/sshd_config
PermitRootLogin no      ### 将默认的  #PermitRootLogin yes 修改成这样的 ###
# the setting of "PermitRootLogin without-password".


1.2、重启sshd服务

Stopping sshd:                                   [  OK  ]  

Starting sshd:                                   [  OK  ]  

Stopping sshd:                                   [  OK  ]
Starting sshd:                                   [  OK  ]


2、修改ssh默认端口22；

2.1、将默认端口22修改为自定义的2020端口

[root@localhost ~]# vi /etc/ssh/sshd_config  

[root@localhost ~]# grep Port /etc/ssh/sshd_config  

Port 2020      

#GatewayPorts no  

[root@localhost ~]# vi /etc/ssh/sshd_config
[root@localhost ~]# grep Port /etc/ssh/sshd_config
Port 2020    
#GatewayPorts no


2.2、在防火墙中加入2020端口的策略

[root@localhost ~]# vi /etc/sysconfig/iptables  

[root@localhost ~]# grep 2020 /etc/sysconfig/iptables  

-A INPUT -p tcp -m state --state NEW -m tcp --dport 2020 -j ACCEPT  

[root@localhost ~]# vi /etc/sysconfig/iptables
[root@localhost ~]# grep 2020 /etc/sysconfig/iptables
-A INPUT -p tcp -m state --state NEW -m tcp --dport 2020 -j ACCEPT


2.3、重启防火墙策略

[root@localhost ~]# /etc/init.d/iptables restart   

iptables: Setting chains to policy ACCEPT: nat filter      [  OK  ]  

iptables: Flushing firewall rules:                         [  OK  ]  

iptables: Unloading moles:                               [  OK  ]  

iptables: Applying firewall rules:                         [  OK  ]  

[root@localhost ~]# /etc/init.d/iptables restart
iptables: Setting chains to policy ACCEPT: nat filter      [  OK  ]
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Unloading moles:                               [  OK  ]
iptables: Applying firewall rules:                         [  OK  ]


2.4、重启sshd服务

[root@localhost ~]# /etc/init.d/sshd restart  

Stopping sshd:                                   [  OK  ]  

Starting sshd:                                   [  OK  ]  

热心网友 时间：2023-10-21 19:05

SSH防暴力破解的解决方法：

1、禁止root用户ssh登陆；

1.1、修改PermitRootLogin项：

[root@localhost ~]# vi /etc/ssh/sshd_config  

[root@localhost ~]# grep Root /etc/ssh/sshd_config  

PermitRootLogin no      ### 将默认的  #PermitRootLogin yes 修改成这样的 ###  

# the setting of "PermitRootLogin without-password".  

[root@localhost ~]# vi /etc/ssh/sshd_config
[root@localhost ~]# grep Root /etc/ssh/sshd_config
PermitRootLogin no      ### 将默认的  #PermitRootLogin yes 修改成这样的 ###
# the setting of "PermitRootLogin without-password".


1.2、重启sshd服务

Stopping sshd:                                   [  OK  ]  

Starting sshd:                                   [  OK  ]  

Stopping sshd:                                   [  OK  ]
Starting sshd:                                   [  OK  ]


2、修改ssh默认端口22；

2.1、将默认端口22修改为自定义的2020端口

[root@localhost ~]# vi /etc/ssh/sshd_config  

[root@localhost ~]# grep Port /etc/ssh/sshd_config  

Port 2020      

#GatewayPorts no  

[root@localhost ~]# vi /etc/ssh/sshd_config
[root@localhost ~]# grep Port /etc/ssh/sshd_config
Port 2020    
#GatewayPorts no


2.2、在防火墙中加入2020端口的策略

[root@localhost ~]# vi /etc/sysconfig/iptables  

[root@localhost ~]# grep 2020 /etc/sysconfig/iptables  

-A INPUT -p tcp -m state --state NEW -m tcp --dport 2020 -j ACCEPT  

[root@localhost ~]# vi /etc/sysconfig/iptables
[root@localhost ~]# grep 2020 /etc/sysconfig/iptables
-A INPUT -p tcp -m state --state NEW -m tcp --dport 2020 -j ACCEPT


2.3、重启防火墙策略

[root@localhost ~]# /etc/init.d/iptables restart   

iptables: Setting chains to policy ACCEPT: nat filter      [  OK  ]  

iptables: Flushing firewall rules:                         [  OK  ]  

iptables: Unloading moles:                               [  OK  ]  

iptables: Applying firewall rules:                         [  OK  ]  

[root@localhost ~]# /etc/init.d/iptables restart
iptables: Setting chains to policy ACCEPT: nat filter      [  OK  ]
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Unloading moles:                               [  OK  ]
iptables: Applying firewall rules:                         [  OK  ]


2.4、重启sshd服务

[root@localhost ~]# /etc/init.d/sshd restart  

Stopping sshd:                                   [  OK  ]  

Starting sshd:                                   [  OK  ]  

热心网友 时间：2023-10-21 19:05

SSH防暴力破解的解决方法：

1、禁止root用户ssh登陆；

1.1、修改PermitRootLogin项：

[root@localhost ~]# vi /etc/ssh/sshd_config  

[root@localhost ~]# grep Root /etc/ssh/sshd_config  

PermitRootLogin no      ### 将默认的  #PermitRootLogin yes 修改成这样的 ###  

# the setting of "PermitRootLogin without-password".  

[root@localhost ~]# vi /etc/ssh/sshd_config
[root@localhost ~]# grep Root /etc/ssh/sshd_config
PermitRootLogin no      ### 将默认的  #PermitRootLogin yes 修改成这样的 ###
# the setting of "PermitRootLogin without-password".


1.2、重启sshd服务

Stopping sshd:                                   [  OK  ]  

Starting sshd:                                   [  OK  ]  

Stopping sshd:                                   [  OK  ]
Starting sshd:                                   [  OK  ]


2、修改ssh默认端口22；

2.1、将默认端口22修改为自定义的2020端口

[root@localhost ~]# vi /etc/ssh/sshd_config  

[root@localhost ~]# grep Port /etc/ssh/sshd_config  

Port 2020      

#GatewayPorts no  

[root@localhost ~]# vi /etc/ssh/sshd_config
[root@localhost ~]# grep Port /etc/ssh/sshd_config
Port 2020    
#GatewayPorts no


2.2、在防火墙中加入2020端口的策略

[root@localhost ~]# vi /etc/sysconfig/iptables  

[root@localhost ~]# grep 2020 /etc/sysconfig/iptables  

-A INPUT -p tcp -m state --state NEW -m tcp --dport 2020 -j ACCEPT  

[root@localhost ~]# vi /etc/sysconfig/iptables
[root@localhost ~]# grep 2020 /etc/sysconfig/iptables
-A INPUT -p tcp -m state --state NEW -m tcp --dport 2020 -j ACCEPT


2.3、重启防火墙策略

[root@localhost ~]# /etc/init.d/iptables restart   

iptables: Setting chains to policy ACCEPT: nat filter      [  OK  ]  

iptables: Flushing firewall rules:                         [  OK  ]  

iptables: Unloading moles:                               [  OK  ]  

iptables: Applying firewall rules:                         [  OK  ]  

[root@localhost ~]# /etc/init.d/iptables restart
iptables: Setting chains to policy ACCEPT: nat filter      [  OK  ]
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Unloading moles:                               [  OK  ]
iptables: Applying firewall rules:                         [  OK  ]


2.4、重启sshd服务

[root@localhost ~]# /etc/init.d/sshd restart  

Stopping sshd:                                   [  OK  ]  

Starting sshd:                                   [  OK  ]  

热心网友 时间：2023-10-21 19:05

SSH防暴力破解的解决方法：

1、禁止root用户ssh登陆；

1.1、修改PermitRootLogin项：

[root@localhost ~]# vi /etc/ssh/sshd_config  

[root@localhost ~]# grep Root /etc/ssh/sshd_config  

PermitRootLogin no      ### 将默认的  #PermitRootLogin yes 修改成这样的 ###  

# the setting of "PermitRootLogin without-password".  

[root@localhost ~]# vi /etc/ssh/sshd_config
[root@localhost ~]# grep Root /etc/ssh/sshd_config
PermitRootLogin no      ### 将默认的  #PermitRootLogin yes 修改成这样的 ###
# the setting of "PermitRootLogin without-password".


1.2、重启sshd服务

Stopping sshd:                                   [  OK  ]  

Starting sshd:                                   [  OK  ]  

Stopping sshd:                                   [  OK  ]
Starting sshd:                                   [  OK  ]


2、修改ssh默认端口22；

2.1、将默认端口22修改为自定义的2020端口

[root@localhost ~]# vi /etc/ssh/sshd_config  

[root@localhost ~]# grep Port /etc/ssh/sshd_config  

Port 2020      

#GatewayPorts no  

[root@localhost ~]# vi /etc/ssh/sshd_config
[root@localhost ~]# grep Port /etc/ssh/sshd_config
Port 2020    
#GatewayPorts no


2.2、在防火墙中加入2020端口的策略

[root@localhost ~]# vi /etc/sysconfig/iptables  

[root@localhost ~]# grep 2020 /etc/sysconfig/iptables  

-A INPUT -p tcp -m state --state NEW -m tcp --dport 2020 -j ACCEPT  

[root@localhost ~]# vi /etc/sysconfig/iptables
[root@localhost ~]# grep 2020 /etc/sysconfig/iptables
-A INPUT -p tcp -m state --state NEW -m tcp --dport 2020 -j ACCEPT


2.3、重启防火墙策略

[root@localhost ~]# /etc/init.d/iptables restart   

iptables: Setting chains to policy ACCEPT: nat filter      [  OK  ]  

iptables: Flushing firewall rules:                         [  OK  ]  

iptables: Unloading moles:                               [  OK  ]  

iptables: Applying firewall rules:                         [  OK  ]  

[root@localhost ~]# /etc/init.d/iptables restart
iptables: Setting chains to policy ACCEPT: nat filter      [  OK  ]
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Unloading moles:                               [  OK  ]
iptables: Applying firewall rules:                         [  OK  ]


2.4、重启sshd服务

[root@localhost ~]# /etc/init.d/sshd restart  

Stopping sshd:                                   [  OK  ]  

Starting sshd:                                   [  OK  ]