tightening sshd, removing server identification banner

Özgür Kazancci ozgur at kazancci.com
Mon Feb 17 16:58:14 UTC 2020


Hello David,

If you're sure you uncommented these lines,
#VersionAddendum none
#Banner none

and restarted the sshd, then there is no much else left -imho-. A 
complete removal of SSHD banner (if that's what you're trying to do) 
requires a manual edit of OpenSSH(d) files&complete complication of it 
from scratch.

Best,
Özgür.




On 17/02/2020 19:53, David Mehler wrote:
> Hello,
> 
> I'm running FreeBSD 12.0. I'm atempting to tighten up my sshd
> configuration. I've got things where I want them, except for the
> connecting banner. I'm using sshaudit.com to test things and this is
> what it's saying for the banner setting:
> 
> Banner:SSH-2.0-OpenSSH_7.8 FreeBSD-20180909
> 
> I would rather this be set to nothing or at most very minimal. Google
> and the sshd_config man page reveals the Banner and VersionAdendum
> options. I've set both to none.
> 
> PrintMotd no
> #PrintLastLog yes
> #VersionAddendum none
> #Banner none
> 
> Can anyone tell me how to get the results I am looking for?
> 
> Thanks.
> Dave.
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe at freebsd.org"


More information about the freebsd-questions mailing list