I have a Linux server with SSH service on it. If I performing a TCP connection to it (e.g. telnet %ip% %port%), it sends me a version line, like SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3. It is not a banner! (Banner sent after successful authentication). So, my question: it is possible to disable this message or change it? Without recompiling from source code...
124100
If you access my server via HTTP using the SSH port (22), you'll see a message like this:     SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.1   Could be possible to display a different message?
14415
I have a small server which I use for testing and programming. Currently it runs Debian 9.4 stretch with 4.14.0-0.bpo.3-amd64 kernel.  Today I tried to connect through SSH but I couldn't then I tried to ping it and it was unreachable. Therefore I had to hard-restart it by unplugging power cable. Then I went to  /var/log/syslog  and I found a strange line containing exactly 6140 characters like the following  ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@  then nothing else until new log entries of system restart. This is actually the first time it happens.  Does someone know what could it be?
15102
What can I do to configure SSH on both client and servers to prevent Write Failed: broken pipe errors? It often occurs if you sleep your client computer and resume later.
20536
I want to change the ssh port from 22 to 2800. I tried to change the /etc/ssh/ssh_config and removed the # from Port line and changed the number to 2800. after trigger the command: service ssh restart The connection continued. When I tried to connect from the port 2800, It refused. The Content of /etc/ssh/ssh_config is: Removed commented lines  Host * Port 2800     SendEnv LANG LC_*     HashKnownHosts yes     GSSAPIAuthentication yes     GSSAPIDelegateCredentials no   The command service ssh status gives the following output:  ● ssh.service - OpenBSD Secure Shell server    Loaded: loaded (/lib/systemd/system/ssh.service; enabled; vendor preset: enabled)    Active: active (running) since Fri 2017-09-22 20:31:45 IRST; 1s ago  Main PID: 1825 (sshd)     Tasks: 1    Memory: 724.0K       CPU: 5ms    CGroup: /system.slice/ssh.service            └─1825 /usr/sbin/sshd -D  Sep 22 20:31:45 GoodMind systemd[1]: Starting OpenBSD Secure Shell server... Sep 22 20:31:45 GoodMind sshd[1825]: Server listening on 0.0.0.0 port 22. Sep 22 20:31:45 GoodMind sshd[1825]: Server listening on :: port 22. Sep 22 20:31:45 GoodMind systemd[1]: Started OpenBSD Secure Shell server.   I tried other ports too. But still it has the same status. What do I do wrong?
62688
Can you explain the following lines in the netstat output?  Active UNIX domain sockets (w/o servers) Proto RefCnt Flags       Type       State         I-Node   Path  unix  2      [ ]         STREAM     CONNECTED     37133819 /tmp/.lxterminal-socket:0-xralf unix  2      [ ]         STREAM     CONNECTED     37109191 /tmp/.lxterminal-socket:0-xralf
30003
This is on Ubuntu 10.10 (Maverick Meerkat) 64-bit desktop.  I want to make my X server listen to remote connections from clients in other machines on the local network. I know about ssh -X and that is not what I want. I vaguely remember changing something like TCPListen from no to yes, but I don't remember where this change should be applied.  I'm interested in either a GUI method or a CLI one.  PS editing /etc/X11/xinit/xserverrc to remove the -nolisten tcp option and rebooting does not work.
91764
I got this message today when trying to log into my server. What should I do? Whats going on?  $ ssh 10.10.10.69 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that the RSA host key has just been changed. The fingerprint for the RSA key sent by the remote host is 3d:1b:02:9e:b2:b8:f0:f7:c6:4f:94:96:f6:e3:c0:d1. Please contact your system administrator. Add correct host key in /root/.ssh/known_hosts to get rid of this message. Offending key in /root/.ssh/known_hosts:8 RSA host key for 10.10.10.69 has changed and you have requested strict checking.Host key verification failed.
106048
I am responsible for maintaining two Debian servers. Every time I have to do anything with security certificates, I Google for tutorials and beat away until it finally works.  However, in my searches I often come across different file formats (.key, .csr, .pem) but I've never been able to find a good explanation of what each file format's purpose is.  I was wondering if the good folks here at ServerFault could provide some clarification on this matter?
46574
I have a CentOS 5.7 VPS using bash as its shell that displays a branded greeting immediately after logging in via SSH. I've been trying to modify it, but can't seem to find where it is in the usual places. So far I've looked in the motd file and checked sshd_config for banner file settings. A banner file is not set.  Where else can I look for where the login message might be?
44583
I just did a do-release-upgrade going from Ubuntu 16.04 to 17.04. However, now when I login via SSH I have the following message   Welcome to Ubuntu 17.04 (GNU/Linux 4.10.0-20-generic x86_64)   * Documentation:  https://help.ubuntu.com  * Management:     https://landscape.canonical.com  * Support:        https://ubuntu.com/advantage  Ubuntu 12.04 LTS end-of-life was April 28, 2017 -- Upgrade your Precise systems!  $ sudo do-release-upgrade -m server  0 packages can be updated. 0 updates are security updates.   My question is, how can I remove the   Ubuntu 12.04 LTS end-of-life was April 28, 2017 -- Upgrade your Precise systems!  $ sudo do-release-upgrade -m server   it wasn't there prior the release-upgrade  I checked and I am on Zesty  lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description:    Ubuntu 17.04 Release:    17.04 Codename:   zesty   My question is not, how can I remove this message, this I found. My question is more, is there a reason why this appears after a release-upgrade? Is this message something generic not taking into consideration the current version of Ubuntu? Or maybe my system is not updated properly?
91963
My /etc/ssh/sshd_config file has a line like:  AllowUsers jim@11.22.33.456   If I want to allow jim to use another IP addresses, how do I specify it?   Does it take the form of a comma separated list? Or, do add a similar line like   AllowUsers jim@new-ip-address   ?
17951
How to disable the keyring for SSH and GPG ?  I would like to keep the keyring for the wifi and other stuff. I'm using Ubuntu 12.04.
100165
How can I secure SSH access to a linux box running Ubuntu k for multiple users?  This server will be for a web app but I'm not sure how to evaluate the tools to perform this task. I have tried a few tools in the past but not sure how they stack up against each-other. How can I evaluate my SSH security and the tools and utilities that I would use to perform that securing?
80794
Local Computer (Fedora)  --SSH--&gt;  Server1  --SSH--&gt;  Server2   In some environments I work in, we have to use "jump boxes" where you ssh to one server in order to get to another server. Is there a quick way to do this, perhaps by editing ~/.ssh/config, such that whenever I ssh to Server2 from my local computer, it automatically creates the necessary connection to Server1? I can setup keys so that I'm not prompted for a password to Server1 if necessary.
83688
I compiled OpenSSH_6.6p1 on one of our server. I am able login via SSH to the upgraded server. But I am not able to connect to other servers running OpenSSH_6.6p1 or OpenSSH_5.8 from this. While connecting I am getting an error as below.  Read from socket failed: Connection reset by peer   On the destination server in the logs, I am seeing it as below.  sshd: fatal: Read from socket failed: Connection reset by peer [preauth]   I tried specifying the cipher_spec [ ssh -c aes128-ctr destination-server ] as mentioned in  and was able to connect. How can configure ssh to use the cipher by default? Why is the cipher required here?
15682
I'm working from the URL I found here:    My ssh client is Ubuntu 64 bit 11.10 desktop and my server is Centos 6.2 64 bit. I have followed the directions. I still get a password prompt on ssh.  I'm not sure what to do next.
25367
I changed my SSH port in the /etc/ssh/sshd_config file and then restarted the ssh service. I implemented fail2ban and updated the port to my SSH under that config. I also then implemented the UFW firewall and allowed incoming connections to my new SSH port.  However, when I try and login with my SSH key using ssh -i /Users/myuser/.ssh/vpsssh user@555.555.555.555 it's trying to connect to port 22 instead of the defined port I have.