SSH Configuration

How administrators log in to this server over SSH. Changes are checked with sshd -t before they are applied, and settings that would lock you out are refused.

Port

Root login

Password or key

Password logins

Allowed

Root SSH keys

0 manage

SSH Port

A non-standard port (e.g. 2222) cuts automated attacks. The new port is opened in CSF first. Keep this session open and test a new login before closing it.

Root Login

With an SSH key only recommended With password or SSH key Not allowed (log in as a sudo user)

Password Authentication

Allow password logins SSH keys only (blocks password guessing completely)

Applies to every user. Refused if no one would be able to log in.

Max Login Attempts

Wrong tries per connection before it is closed (CSF's LFD bans repeat offenders).

seconds to finish logging in

Idle Check

seconds

Checks idle sessions; dead ones are closed after 2 missed checks. 0 = off.