Re: [Re]How to restrict the ssh version banner ?

From: David Kaczynski (TheSnitch@HUS.HMAIL.COM)
Date: 05/30/02


From: David Kaczynski <TheSnitch@HUS.HMAIL.COM>
Date: Thu, 30 May 2002 09:11:12 -0700

On Wed, 29 May 2002 17:35:07 +0900, "JsSys" <JwSys@hitel.net> wrote:

>How to restrict the ssh version banner ? or change ssh version ...

Quick answer: Don't do it...

Longer answer:

http://groups.google.com/groups?q=cy9se16re.fsf%2540zeus.theos.com&hl=en&lr=&selm=m28b5ukjnpcgjot1g1bdmoaq5i85s0p526%404ax.com&rnum=1

>[root@ass ssh2]# telnet 192.168.2.173 22
>Trying 192.168.2.173...
>Connected to 192.168.2.173.
>Escape character is '^]'.
>SSH-1.99-3.1.0 SSH Secure Shell (non-commercial)
>
>Connection closed by foreign host.

BTW, you should upgrade to SSH v3.12, and *please* don't post in HTML.

|$ head -n8 CHANGES
|2002-04-23 Sami J. Lehtinen <sjl@ssh.com>
|
| * ssh-3.1.2.
|
| * sshd2: Fixed a security bug, that allowed a malicious client to
| bypass "AllowedAuthentications" access
| restrictions. RequiredAuthentications did the trick, though.