Replacing OpenSSH server with dropbear

aip — Sat, 26 Jun 2010 20:42:35 +0000

dropbear is a SSH 2 server and client designed to be small enough to be used in small memory environments, while still being functional and secure enough for general use.

It implements most required features of the SSH 2 protocol, and other features such as X11 and authentication agent forwarding.

1. Install dropbear

apt-get install dropbear

2. Stop OpenSSH server (you won't loose your SSH connection)

/etc/init.d/ssh stop

2. Enable dropbear (pico /etc/default/dropbear)

NO_START=0

3. Start dropbear

/etc/init.d/dropbear start

4. Remove OpenSSH server

apt-get remove openssh-server

Disable root login to SSH

aip — Mon, 09 Nov 2009 20:44:31 +0000

Allowing root logins to your SSH damon is a big security threat. If the SSH port is open, hackers will probably at some time attempt to brute force your root password. It's a good idea to disable root logins to SSH and instead use a normal user to login and type "su -" to enter the super user shell or sudo to perform tasks that require root privileges.

1. Open the SSH daemon config file and change this line: (pico /etc/ssh/sshd_config)

PermitRootLogin no

2. Restart the SSH daemon

/etc/init.d/ssh restart

Debian Tutorials » ssh

Replacing OpenSSH server with dropbear

Disable root login to SSH