![\"\"](\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/sshtricks-1.jpg\")
<\/p>\nThe ability to SSH into your server is one of the most versatile tools in your sysadmin toolbox. It’s more than just a simple way to connect remotely to your server, it can be used to securely copy files, make automation easier, and add even more security to your server.<\/p>\n
So open up your SSH client of choice, log into your server, and discover more with these tricks!<\/p>\n
<\/p>\n
Although it has “Secure” in the name, and it’s secure in your default installation, you can make some tweaks to your SSH to provide an even more secure environment.<\/p>\n
You can find the parameters to change in You can deny root user logins by finding the line:<\/p>\n Change the If you have less than ten users, you can also use If you have more than ten, or if you’re managing your users by group, use To set up the groups first:<\/p>\n Then in Restart the SSH daemon with:<\/p>\n Or if you use systemd, use:<\/p>\n or<\/p>\n Another option is only allow SSH sessions to originate from a single server – often known as the Jump server. This is great if you know that your IP address won’t change.<\/p>\n You can limit the allowed IP addresses through IPTables using:<\/p>\n SSH protocol also includes SCP (Secure Copy) and SFTP (Secure FTP), letting you securely move files between your computer and your server as needed.<\/p>\n You can easily copy files over if you know the specific path on the remote server:<\/p>\n You can also copy files from the remote server to your system by changing the syntax:<\/p>\n The trailing full stop (.) tells SCP to copy to the current directory on the local system.<\/p>\n SFTP works like FTP, just at the command line. You can transfer one file or many by using wildcards to either get or put files.<\/p>\n To initiate an SFTP session:<\/p>\n Then enter the user’s password.<\/p>\n To put files onto the server:<\/p>\n To get files from the server:<\/p>\n It’s often convenient to connect from one server to another, especially for automated tasks, but you could run the risk of your scripts containing passwords, which is a major security risk.<\/p>\n You can set up shared keys, which are also a security risk, but since you can control which systems the users can connect to, you can add an extra layer of security.<\/p>\n Use SSH to connect to every host you want to configure passwordless SSH in. Then SSH back to the original host from each system to accept the host fingerprint and establish a local .ssh directory in the user’s home directory on the remote system<\/p>\n Enter the password for the remote host<\/p>\n Type SSH into the remote host – no password is required!<\/p>\n SSH is a remarkable tool for managing your server. Learning how to use SSH, whether you read books or use online articles, helps to make you a very powerful administrator.<\/p>\n What are some SSH tricks you use on your servers?<\/p>\n","protected":false},"excerpt":{"rendered":" Using SSH is one of the most versatile tools in your sysadmin toolbox. We have three tricks to get even more out of your SSH!<\/p>\n","protected":false},"author":2,"featured_media":16636,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,23],"tags":[],"class_list":{"0":"post-16629","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-dedicated-servers","8":"category-vps"},"yoast_head":"\n\/etc\/ssh\/sshd_config<\/code><\/p>\nPermitRootLogin Yes<\/code><\/p>\nYes<\/code> to No<\/code>.<\/p>\nAllowUsers<\/code> to limit which users can connect to your server using SSH. The user list is space delimited, and don’t forget to include yourself!<\/p>\nAllowUsers erica neville joseph sanjit<\/code><\/p>\nAllowGroups<\/code> and create separate groups for users.<\/p>\nsudo groupadd -r sshadmin
\nsudo usermod -a -G sshadmin erica<\/code><\/p>\nsshd_config<\/code>, find AllowGroups<\/code> and change it to:<\/p>\nAllowGroups sshusers<\/code><\/p>\nsudo service ssh restart<\/code><\/p>\nsudo systemctl restart sshd<\/code><\/p>\nsudo systemctl restart ssh<\/code><\/p>\nsudo iptables -A INPUT -p tcp -s [IPADDRESS] -dport 22 - j ACCEPT<\/code><\/p>\n![\"\"](\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/sshtricks-3.jpg\")
<\/p>\nCopying files to and from your remote computer<\/h3>\n
scp index.html neville@serverfarm:\/opt\/test\/index.html
\nneville@serverfarm's password: ******************
\nindex.html 100% 0 0.0KB\/s 00:00<\/code><\/p>\nscp neville@serverfarm:\/opt\/text\/index.html .<\/code><\/p>\nsftp sanjit@serverfarm<\/code><\/p>\nsftp> put index.html
\nsftp> put index.html shop.html opening-hours.html
\nsftp> mput *.html<\/code><\/p>\nsftp> get index.html
\nsftp> get index.html shop.html opening-hours.html
\nsftp> mget *.html<\/code><\/p>\n![\"\"](\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/sshtricks-4.jpg\")
<\/p>\nSet up a passwordless SSH connection for automated scripting<\/h3>\n
ssh-keygen -t rsa
\ncat. ssh\/id_rsa.pub >> .ssh\/authorized_keys
\ncat .ssh\/authorized_keys | ssh serverfarm 'cat >> .ssh\/authorized_keys'<\/code><\/p>\nexit<\/code> to return to the original host<\/p>\n![\"\"](\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/sshtricks-2.jpg\")
<\/p>\n