Mozilla Guidelines to Secure SSH

Re:Mozilla Guidelines to Secure SSH by cosentiyes on Tuesday November 09, 2021 @12:16AM (#29157999)

What are some other high quality “harden your server” guides? Many seem to be out of date

[ Parent | on HN ]

Re:Mozilla Guidelines to Secure SSH by bravetraveler on Tuesday November 09, 2021 @06:00PM (#29168733)

Compliance benchmarks like the other user suggests are probably best. eg: CIS

They're updated fairly regularly. However, take them with a grain of salt.

They'll worry about things like TCPWrappers, but that's how we did firewalls before they existed. Needless in the days of iptables, ebtables, nftables, etc.

Blogs tend to be recycled/dated recommendations with none/very little third party testing.

[ Parent | on HN ]

Re:Mozilla Guidelines to Secure SSH by igetspam on Tuesday November 09, 2021 @06:37AM (#29160312)

CIS workbenches are updated regularly. You have to sign up for an account, which is free, to get access.

[ Parent | on HN ]

Re:Mozilla Guidelines to Secure SSH by bravetraveler on Tuesday November 09, 2021 @06:04PM (#29168778)

Just keep in mind that some of the recommendations could've been dropped 20 to 30 years ago.

I don't disagree, they make some good suggestions - but take TCPWrappers for example. CIS will suggest you use it.

That predates firewalls, and requires applications be built/linked against the library.

These days, not worth the time/effort. Do the default-drop policy they suggest, and carry on!

[ Parent | on HN ]