Bastion host – How to secure and harden the ssh server on it?

• Kevin Thomas
• December 19, 2016

Enable a firewall and by default block all  IP access to the SSH Port and enable only your staff ips or dynamic ip ranges that you trust. Disable direct root login. Its always better to login as a non privileged user first and the switch to the root user. This is the norm if you