tightening sshd, removing server identification banner

Valeri Galtsev galtsev at kicp.uchicago.edu
Mon Feb 17 16:59:32 UTC 2020



> On Feb 17, 2020, at 10:53 AM, David Mehler <dave.mehler at gmail.com> wrote:
> 
> Hello,
> 
> I'm running FreeBSD 12.0. I'm atempting to tighten up my sshd
> configuration. I've got things where I want them, except for the
> connecting banner. I'm using sshaudit.com to test things and this is
> what it's saying for the banner setting:
> 
> Banner:SSH-2.0-OpenSSH_7.8 FreeBSD-20180909
> 
> I would rather this be set to nothing or at most very minimal. Google
> and the sshd_config man page reveals the Banner and VersionAdendum
> options. I've set both to none.
> 
> PrintMotd no
> #PrintLastLog yes
> #VersionAddendum none
> #Banner none
> 

My sshd_config file has:

Banner /etc/some_file

and /etc/some_file contains the text which is being put as banner (Like “This is [my organization name] system. Unauthorized use is prohibited”) and whatever else I feel necessary to greet users witrh on particular box.

I hope this helps.

Valeri

> Can anyone tell me how to get the results I am looking for?
> 
> Thanks.
> Dave.
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"

++++++++++++++++++++++++++++++++++++++++
Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247
++++++++++++++++++++++++++++++++++++++++



More information about the freebsd-questions mailing list