Video Tut: Set Up SSH Access To Your Own Pinephone .onion (security enhancement)
#1
Lightbulb 
Many Pinephone users have ssh access open. Result being their Pinephone's ssh server shows up/is by default accessible on the open internet. This can be dangerous (especially given many undoubtedly use weak number passwords (ie: guessable numbers doubling for screen unlock pin)),

So I thought fellow Pinephone users may find this video helpful.

A quick (5min), easy video walkthrough/guide. A simple to implement security enhancement (using Mobian Pinephone as example in the video but will work on any Linux).
Make your Pinephone ssh server only accessible as a Tor .onion address (Blocking access/portscans/shodan for users on standard internet).

https://youtu.be/syKZNMVxTM4

After following the video, edit  /etc/ssh/sshd_config and uncomment/edit the line to match:

ListenAddress 127.0.0.1

Optionally (in case anything in ssh config goes wrong) block using iptables issue the following afterwards:

Code:
sudo iptables -A INPUT -p tcp -s 127.0.0.1 --dport 22 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 22 -j DROP

The above iptables commands block ssh access to your Pinephone from all parties outside your Pinephone localhost address itself (used by tor locally). This means it won't show up when portscanned, won't show up on shodan, and cannot be brute forced without having your personal .onion address. Smile
- RTP

"In the beginner's mind there are many possibilities, in the expert's mind there are few." -Shunryu Suzuki

My Blog: https://politictech.wordpress.com


Possibly Related Threads…
Thread Author Replies Views Last Post
  Mobian pinephone -- "Stalled" (best way to describe it) fred_mobian 3 66 9 hours ago
Last Post: bcnaz
  Axolotl on PinePhone / Mobian arno_nuehm 116 33,273 09-17-2021, 02:36 AM
Last Post: arno_nuehm
  Video playback error (Totem/Videos) Zebulon Walton 0 138 08-19-2021, 05:37 PM
Last Post: Zebulon Walton
  Pure Maps GPS on Pinephone Mobian godzillest 3 599 08-03-2021, 03:07 AM
Last Post: mouffa
  Axolotl on Pinephone CarmeloLabadie 1 364 07-26-2021, 12:56 AM
Last Post: kqlnut
  Armbian on the PinePhone Meow 0 287 07-21-2021, 10:42 PM
Last Post: Meow
  Best/easiest way to install minimal Debian on PinePhone? mcgee 6 790 07-18-2021, 09:35 AM
Last Post: swiley
  Pinephone in Canada using Shaw mobile provider RRman 0 329 06-19-2021, 06:35 PM
Last Post: RRman
  Reboot Modem on Pinephone in Mobian eggmatters 5 1,686 06-17-2021, 02:08 PM
Last Post: eggmatters
  Remote desktop, video playback issues Zebulon Walton 13 2,519 06-17-2021, 06:57 AM
Last Post: aus

Forum Jump:


Users browsing this thread: 1 Guest(s)