|
|
|
As the internet grows it is more frequently the subject of security breaches. The easiest way to hack a web site is to setup a sniff program, usually at an ISP and grab the username and password where a user is logging into. This is very easily done when a client uses telnet because telnet passes all information to the server in clear text. When we allowed users to access our network with telnet we had at least one hack attempt per day. Successful hack attempts result in damaged or destroyed sites, stolen information, and FBI investigations. SuperNova now has one of the most secure networks thanks to the cooperation of all shell account users who are abandoning telnet and accessing their account via Secure Shell (SSH). SSH does not pass any information in clear text but rather uses secure encryption. To get started with SSH, you must do the following: A. Acquire client side software There are two companies we recommend who sell client versions of SSH. 1) The most stable is SecureCRT. They have a 30 day free trial available at their web site. SecureCRT is at http://www.vandyke.com/products/SecureCRT/. 2) A stable international version is available at Datafellows http://www.datafellows.com/download-purchase/ and Users looking for a free version or users outside the United States should file through the free implementations at http://www.net.lut.ac.uk/psst/ Pay attention to the totally free internationally available ttssh: http://www.zip.com.au/~roca/ttssh.html SuperNova must enable SSH on your server for your account. B. Fax a photo id along with your domain name, email address, and a brief sentence requesting ssh support to Customer Support at SuperNova at: 714-838-9840. We will then enable the icon on your control panel so you can continue with the rest of the steps. C. Follow the SSH client side software instructions to generate an RSA key. D. Install the key in the SSH section of your Virtual Domain control panel. If you are using a PC and wish to use
SecureCRT from www.vandyke.com, these are the settings.
Protocol: SSH
E. In the Control Panel it will ask you the following question after you install your key: Your SSH public key has been placed on the server. Before log into your domain using SSH, please setup your access addresses. You should put in the address that you will be coming from (ie your isp) but use a * in front of the name. ie *.earthlink.net. That is to ensure that you are the person trying to Telnet to our system and not an intruder. |