SSH Security

[Scot L. Harris]

On Tue, 2005-12-06 at 20:58, Ben Halicki wrote:
> Hi all,
> 
> I'm planning on configuring SSH for remote administration and was just 
> wondering if anyone has a few tips on securing it.  How secure is it to have 
> an SSH port open and accessible via the Internet?  I'll be using key-based 
> authentication only and disabling password authentication.
> 
> Any pointers would be greatly appreciated.
> 
> Thanks,
> 
> Ben Halicki 
> 

Key based authentication is the right way to go.  You should disable
root ssh access completely.  

And while it will not really improve your security you might consider
using a different port for ssh.  It will keep your log files much
cleaner.