[B! SSH] yahihiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yahihi id:yahihi

SSHã«é–¢ã™ã‚‹yahihiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ç›£è¦–ã¨ã‹ã§å®šæœŸçš„ã« SSH ã™ã‚‹ãªã‚‰ ControlMaster ã‚’è¨å®šã™ã‚‹ã¨ã‚¹ãƒƒã‚ãƒªã™ã‚‹ã‘ã©å¸¸ç”¨ã¯ã¡ã‚‡ã£ã¨ - ngyukiã®æ—¥è¨˜
Cacti ã® Percona ã®ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚’ä½¿ã†å ´åˆã€Cacti ã‹ã‚‰ç›£è¦–å¯¾è±¡ã®ã‚µãƒ¼ãƒã« SSH ã§æŽ¥ç¶šã—ã¦ãƒ¡ãƒˆãƒªã‚¯ã‚¹ã‚’å–ã£ã¦ãã‚‹ã“ã¨ã«ãªã‚‹ã®ã§ã™ãŒãƒ»ãƒ»ãƒ»æ™®é€šã«ã‚„ã‚‹ã¨éƒ½åº¦ã‚µãƒ¼ãƒã«SSHæŽ¥ç¶šã™ã‚‹äº‹ã«ãªã‚Šã¾ã™ã—ã€å¯¾è±¡ã‚µãƒ¼ãƒã® /var/log/secure ã«ãƒã‚°ãŒç„¡é§„ã«è¨˜éŒ²ã•ã‚Œã¦è¾›ã„ã§ã™ã€‚ ãã“ã§ ControlMaster ã‚’ä½¿ã„ã¾ã™ã€‚ ControlMaster ã¨ã¯ é©å½“ãªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã« ssh_config ã‚’ä¸‹è¨˜ã®ã‚ˆã†ã«ä½œæˆã—ã¾ã™ã€‚ ControlMaster auto ControlPath ~/.ssh/mux-%r@%h:%p ControlPersist 10m ssh -F ssh_config ... ã®ã‚ˆã†ã«ã“ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æŒ‡å®šã—ã¦å¯¾è±¡ã‚µãƒ¼ãƒã«æŽ¥ç¶šã—ã¾ã™ã€‚ã™ã‚‹ã¨ãƒ»ãƒ»ãƒ» æœ€åˆã«æŽ¥ç¶šã—ã‚ˆã†ã¨ã—ãŸã¨ãã«ãƒãƒƒã‚¯ã‚°ãƒ©ã‚¦ãƒ³ãƒ‰ã§ãƒžã‚¹ã‚¿ãƒ¼æŽ¥ç¶šã‚’å¼µã‚‹ãƒ—ãƒã‚»ã‚¹ãŒèµ·å‹•ã™ã‚‹ ã“ã®ãƒžã‚¹ã‚¿ãƒ¼æŽ¥
yahihi 2024/07/09
SSH
ãƒªãƒ³ã‚¯
If youâ€™re not using SSH certificates youâ€™re doing SSH wrong
If youâ€™re not using SSH certificates youâ€™re doing SSH wrongUpdated on: May 20, 2024 SSH is ubiquitous. It's the de-facto solution for remote administration of *nix systems. But SSH has some pretty gnarly issues when it comes to usability, operability, and security. You're probably familiar with these issues: SSH user experience is terrible. SSH user on-boarding is slow and manual. Connecting to ne
yahihi 2022/03/28
SSH
ãƒªãƒ³ã‚¯
å¤šæ®µSSHã§4æ®µå…ˆã®ã‚µãƒ¼ãƒã«ä¸€ç™ºãƒã‚°ã‚¤ãƒ³ - Glide Note
å…ˆæ—¥ã«ãƒ«ãƒ¼ã‚¿ã®ä¸å…·åˆã§ã€æ±äº¬æœ¬ç¤¾ã‹ã‚‰ç¦å²¡æ”¯ç¤¾å†…ã®ä¸€éƒ¨é–‹ç™ºã‚µãƒ¼ãƒã«ç›´æŽ¥sshå‡ºæ¥ãªããªã£ãŸã®ã§ã€ ProxyCommandã‚’åˆ©ç”¨ã—ã¦ã€3å€‹ã®ã‚µãƒ¼ãƒã‚’çµŒç”±ã—ã¦ç›®çš„ã®ã‚µãƒ¼ãƒã«sshã—ãŸã®ã§ã€è¨å®šã®ãƒ¡ãƒ¢ã€‚ ã‚„ã‚ŠãŸã„ã“ã¨ ProxyCommandã‚’åˆ©ç”¨ã—ã¦colinuxã‹ã‚‰è¤‡æ•°ã®ã‚µãƒ¼ãƒã‚’çµŒç”±ã—ã¦ã€æ”¯ç¤¾å†…ã®ã‚µãƒ¼ãƒã«å…¥ã‚ŠãŸã„ã€‚ çµŒç”±ã™ã‚‹ã‚µãƒ¼ãƒã¯ä¸‹è¨˜ã®ã‚ˆã†ãªæ„Ÿã˜ã§ä¸ç¶™ã‚µãƒ¼ãƒ3å€‹ã€‚ +---------+ +------------+ +--------------+ +----------------+ +---------------+ | colinux | ==> | dev server | ==> | tokyo server | ==> | fukuoka server | ==> | backup server | +---------+ +------------+ +----------
yahihi 2012/02/27
SSH
ãƒªãƒ³ã‚¯
Google Code Archive - Long-term storage for Google Code Project Hosting.
Code Archive Skip to content Google About Google Privacy Terms
yahihi 2011/10/25
ssh

putty
ãƒªãƒ³ã‚¯
Amazon EC2 Micro Instance ã‚’ç„¡æ–™æž ã§å®‰å…¨ã«åˆ©ç”¨ã™ã‚‹æ–¹æ³• - bluepapa32â€™s Java Blog
å‰å›ž Amazon EC2 Micro Instance ä¸Šã« Tomcat6 ã‚’ç«‹ã¡ä¸Šã’ã¦ã¿ãŸã€‚ è‡ªåˆ†ã®ç«¯æœ«ã® WEBãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰ EC2 ä¸Šã® Tomcat ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ç‚ºã«ã¯ Security Group ã®è¨å®šã‚’å¤‰æ›´ã—ã¦ 8080 ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’è¨±å¯ã—ãªãã¦ã¯ãªã‚‰ãªã„ã®ã ãŒ... ã¾ã Tomcat ã®è¨å®šã‚’ã¡ã‚ƒã‚“ã¨ã—ã¦ã„ãªã„ã®ã« ã„ããªã‚Šã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã«å…¬é–‹ã—ã¦ã—ã¾ã†ã®ã¯ã‚ã¾ã‚Šã«ã‚‚ç„¡è¬€ã€‚ ãã‚‚ãã‚‚ å€‹äººçš„ã«ä½¿ã†ã ã‘ãªã®ã« å±é™ºã‚’å†’ã—ã¦ã¾ã§ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã«å…¬é–‹ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã®ã ã‚ã†ã‹ï¼Ÿ ã¨è¨€ã†ã“ã¨ã§... EC2 ä¸Šã®ã‚µãƒ¼ãƒ“ã‚¹ã«å®‰å…¨ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹æ–¹æ³•ã‚’è€ƒãˆã¦ã¿ãŸã€‚ æœ€åˆã«æ€ã„ã¤ãã®ã¯... è‡ªåˆ†ã®ç«¯æœ«ã‹ã‚‰ã ã‘ 8080 ãƒãƒ¼ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã‚ˆã†ã« Security Group ã® Source ã‚’è¨å®šã™ã‚‹ã“ã¨ ãŸã ã€ã“ã‚Œã ã¨ä½¿ã„ãŸã„ç«¯æœ«ã® IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å…¨ã¦è¨å®šã—ã¦ãŠã‹ãªã„
yahihi 2011/07/14
AmazonEC2

SSH
ãƒªãƒ³ã‚¯
SSHç·å½“ã‚Šæ”»æ’ƒ(Brute Force Attack)ã®å‚¾å‘ã‹ã‚‰åˆ©ç”¨ã‚’é¿ã‘ãŸã„ãƒ¦ãƒ¼ã‚¶å - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
æŸæ‰€ã§é‹ç”¨ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒã®è©±ãªã‚“ã§ã™ãŒã€å‰²ã¨"SSH Brute Force Attack"ãŒãƒ’ãƒ‰ãã€å¯¾ç–ã‚’è¡Œã‚ãªã„ã¨ã„ã‘ãªã„ã‚“ã§ã™ãŒã€ãã®å‰ã«ã›ã£ã‹ããªã®ã§ã€æ”»æ’ƒè€…ãŒã©ã‚“ãªãƒ¦ãƒ¼ã‚¶åã§ãƒã‚°ã‚¤ãƒ³ã‚’è©¦ã¿ã¦ã„ã‚‹ã‹ã®çµ±è¨ˆã‚’å–ã£ã¦ã¿ã¾ã—ãŸã€‚ ã¨ã„ã†ã‚ã‘ã§ã€ãƒã‚°ã‚¤ãƒ³ã«å¤±æ•—ã—ãŸå›žæ•°ã€ä¸Šä½10ãƒ¦ãƒ¼ã‚¶åã®ä¸€è¦§ã‚’å–å¾—ã™ã‚‹ãƒ¯ãƒ³ãƒ©ã‚¤ãƒŠãƒ¼ã€‚ # cat /var/log/secure* | grep 'Invalid' | awk '{print $8}' | sort | uniq -c | sort -nr | head -n 10çµæžœã¯ã€ã ã„ãŸã„äºˆæƒ³é€šã‚Šã§ã™ãŒã€â†“ã®ã‚ˆã†ãªæ„Ÿã˜ã§ã™ã€‚ 1474 admin 1399 test 1059 123456 751 oracle 703 user 570 guest 416 web 380 www 370 info 359 backupã¨ã„ã†ã‚ã‘ã§ã€"admin"ã¨ã‹"
yahihi 2011/02/21
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSH
ãƒªãƒ³ã‚¯
ã•ãã‚‰ã®VPSã®Debianã§SSHãƒãƒ¼ãƒˆãƒ•ã‚©ãƒ¯ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãªPROXYã‚µãƒ¼ãƒã‚’åˆ©ç”¨ã™ã‚‹ - UDONCHAN
ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚µãƒ¼ãƒ“ã‚¹ãƒ—ãƒãƒã‚¤ãƒ€ã®è¡Œå„€ã®æ‚ªã„åŒå±…äººã«å·»ãè¾¼ã¾ã‚Œã¦ã—ã¾ã£ãŸçµæžœï¼ŒWebæŽ²ç¤ºæ¿ãªã©ãŒåˆ©ç”¨å‡ºæ¥ãªããªã£ã¦ã—ã¾ã†ï¼Œãã‚“ãªçµŒé¨“ã‚’ã—ãŸã“ã¨ãŒã‚ã‚‹äººã¯å°‘ãªããªã„ã ã‚ã†ï¼Žç‰¹ã«2ch æŽ²ç¤ºæ¿ã§ã¯ï¼Œãã®æŽ²ç¤ºæ¿ã®ç‰¹æ€§ä¸Šã‹ã“ã®ã‚ˆã†ãªã“ã¨ãŒå¤§å¤‰å¤šãï¼Œã—ã‹ã‚‚ä¿ºã¯ãƒ—ãƒãƒã‚¤ãƒ€ã¨ã—ã¦dionã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã®ã§ï¼Œå¤šãã®æ¿ã§å¹´ä¸ã»ã¨ã‚“ã©ã®æœŸé–“ã§æ›¸ãè¾¼ã¿ãŒå‡ºæ¥ãªã„ï¼Ž2ch æŽ²ç¤ºæ¿ã¯æˆ‘ã€…ã®ãƒ©ã‚¤ãƒ•ãƒ©ã‚¤ãƒ³ã§ã‚ã‚‹ã‹ã‚‰ï¼Œæ›¸ãè¾¼ã¿ãŒä¸å¯èƒ½ã§ã‚ã‚‹ã¨ã„ã†ã“ã¨ã¯ç”±ã€…ã—ãäº‹æ…‹ã§ã‚ã£ã¦ï¼Œã“ã‚Œã¯ä½•ã‚‰ã‹ã®æ–¹æ³•ã‚’ç”¨ã„ã‚‹ã“ã¨ã«ã‚ˆã£ã¦æ”¹å–„ã™ã‚‹ã¹ãã§ã‚ã‚‹ï¼Ž ã•ã¦ï¼Œæœ€è¿‘ã®ä¸€é€£ã®è¨˜äº‹ã®é€šã‚Šã•ãã‚‰ã®VPSã®åˆ©ç”¨ã‚’å§‹ã‚ãŸè¨³ãªã‚“ã ã‘ã©ï¼Œã“ã‚Œã¯ã‚¹ã‚¿ãƒ†ã‚£ãƒƒã‚¯ãªIPã‚’ï¼‘ã¤ä½™åˆ†ã«æŒã£ã¦ã„ã‚‹ã“ã¨ã¨åŒç¾©ã§ã‚ã‚‹ã“ã¨ã¯å®¹æ˜“ã«ç†è§£å‡ºæ¥ã‚‹ã¨æ€ã†ï¼Žä»Šå›žã®ç›®çš„ã‚’é”æˆã™ã‚‹ç‚ºã«ï¼Œã“ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’æœ‰åŠ¹æ´»ç”¨ã—ãªã„ç†ç”±ã¯ç„¡ã„ï¼Žã¤ã¾ã‚‹ã¨ã“ã‚ï¼Œã“ã® VPS ã‚’è¸ã¿å°ã«ã™ã‚‹ã¨ã„ã†å¯¸æ³•ã ï¼Žã¾ãšç›´æ„Ÿçš„
yahihi 2010/10/31
squid

SSH
ãƒªãƒ³ã‚¯
1