From owner-freebsd-questions Mon Feb 3 11:28:20 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ADAAB37B405 for ; Mon, 3 Feb 2003 11:28:18 -0800 (PST) Received: from pa-plum1b-166.pit.adelphia.net (pa-plum1b-166.pit.adelphia.net [24.53.161.166]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9D7A443F75 for ; Mon, 3 Feb 2003 11:28:17 -0800 (PST) (envelope-from wmoran@potentialtech.com) Received: from potentialtech.com ([172.16.0.95]) by pa-plum1b-166.pit.adelphia.net (8.12.3/8.12.3) with ESMTP id h13JThT5071951; Mon, 3 Feb 2003 14:29:43 -0500 (EST) (envelope-from wmoran@potentialtech.com) Message-ID: <3E3EC27D.8010601@potentialtech.com> Date: Mon, 03 Feb 2003 14:26:53 -0500 From: Bill Moran User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.1) Gecko/20021127 X-Accept-Language: en-us, en MIME-Version: 1.0 To: chip@wiegand.org Cc: questions@freebsd.org, carvin5string@netscape.net Subject: Re: openssh - i'm confused References: <200302031047.AA3831693348@pioneernet.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Chip Wiegand wrote: > I am setting up a web server to be co-located at my isp's office. I am setting up openssh > for my connectivity to it. I have run ssh-keygen on it and now have the files identity, > identity.pub and authorized_keys in the .ssh directory in my home directory. I have copied > the file identity.pub to my w2k box and renamed it to identity.ppk (because that's what the > WinSCP program wants). Is this okay to do? Can I now disable telnet and any other inetd > services that may be running? Any other suggestions? Have you ever used ssh before? I've used the system installed ssh/sshd for years and there's very little that needs set up to make it work. You're definately more secure using keygen to make public/private keys, but that's not even necessary. I've used it without generating keys with no problems. Make sure /etc/rc.conf has sshd_enable="YES" so the daemon starts, and hook it to your local network and test. It's really not much harder to use than telnet, just much more secure. -- Bill Moran Potential Technologies http://www.potentialtech.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message