diff --git a/content/posts/ssh-hardening.md b/content/posts/ssh-hardening.md index 07d0ea4..0debb3a 100644 --- a/content/posts/ssh-hardening.md +++ b/content/posts/ssh-hardening.md @@ -9,7 +9,7 @@ tags = [ ] +++ -As you could see on my last post about [fail2ban]({{< ref "/posts/fail2ban-basics" >}} "Fail2ban basics"), the SSH services are a popular target for brute force attacks, we really should take our time to improve our server's security. +As you could see on my last post about [fail2ban]({{< ref "/posts/fail2ban-basics" >}} "Fail2ban basics"), the SSH service is a popular target for brute force attacks, we really should take our time to improve our server's security. On top of iptables rules and fail2ban jails, we have a couple parameters that we can fine-tune on our servers to make another layer of protection. @@ -36,7 +36,7 @@ If you would like to have yet another level of security, you can implement [2FA ### Disable unnused authentication methods -By default, OpenSSH server comes with more authentication methods that you problaly are not using enabled by default. You acn disable them to reduce the attack surface of your server: +By default, OpenSSH server comes with more authentication methods that you problaly are not using enabled by default. You can disable them to reduce the attack surface of your server: ```bash ChallengeResponseAuthentication no