Richweb SSH Customizations

By default ssh binds to ALL ip addresses on a host. For application servers that run 1 or more vservers Richweb changes the sshd config on the main host to listen only on the main host ip address.

Example /etc/ssh/sshd_config entry:
ListenAddress feller.richweb.com

Where feller.richweb.com is a valid /etc/hosts entry.

When changing the ip address of an appliance or app server it is important to correct /etc/hosts and restart sshd.

Richweb will often change the default listen port as well:

Example:
Port 822

Other typical sshd settings:

TCPKeepAlive yes

X11Forwarding no
ClientAliveInterval 120
ClientAliveCountMax 3
UseDNS no

PermitEmptyPasswords no