#Using SSH

When running an Mainsail node, especially a Validator Node, you should consider your server’s security as your main priority.

#SSH Security

#Edit Your SSH Config

Edit your sshd_config by running the following command.

1sudo nano /etc/ssh/sshd_config

file: /etc/ssh/sshd_config

1# What ports, IPs and protocols we listen for
2Port 22

Change the 22 to a port of your choosing between 49152 and 65535. This is the new SSH port we will connect on. Since we are not using the default SSH port, it is crucial you do not forget what you choose, or you will not be able to access your server.

From now on port 22 is not usable for SSH connections.

file: /etc/ssh/sshd_config

1# What ports, IPs and protocols we listen for
2Port 55555

#Authentication Settings

In the previous section, we had you create a new account for security purposes. You should never log in as root to your server after it has been set up. Our first security measure is going to be to disable root access altogether.

file: /etc/ssh/sshd_config

1# Authentication:
2LoginGraceTime 120
3PermitRootLogin yes
4StrictModes yes

Change LoginGraceTime to 60 and set PermitRootLogin to no

file: /etc/ssh/sshd_config

1# Authentication:
2LoginGraceTime 60
3PermitRootLogin no
4StrictModes yes

#Disable X11 Forwarding

Set X11Forwarding to no.

file: /etc/ssh/sshd_config

1X11Forwarding yes
2X11DisplayOffset 10
3PrintMotd no
4PrintLastLog yes
5TCPKeepAlive yes
6#UseLogin no

/file: etc/ssh/sshd_config

1X11Forwarding no

#Limit Max Concurrent Connections

Scroll down until you see the following line and uncomment MaxStartups. Then set MaxStartups to 2.

/file: etc/ssh/sshd_config

1#MaxStartups 10:30:60
2#Banner /etc/issue.net

file: /etc/ssh/sshd_config

1MaxStartups 2
2#Banner /etc/issue.net

#Save Your Config File

Press CTRL+X to exit the file, Y to save the file and then Enter to write to the file and return to the command line.

#Restart SSH Daemon

1sudo service ssh restart
2exit

#Test New SSH Connection

1ssh user@yournode -p 55555

If everything was setup successfully, you should be reconnected to your Mainsail node. Replace 55555 with the port you chose when setting up your sshd_config.