{"id":41654,"date":"2024-11-07T16:56:27","date_gmt":"2024-11-07T16:56:27","guid":{"rendered":"https:\/\/atmokpo.com\/w\/?p=41654"},"modified":"2024-11-26T06:36:02","modified_gmt":"2024-11-26T06:36:02","slug":"7-%eb%b3%b4%ec%95%88-%ec%84%a4%ec%a0%95-%eb%b0%8f-%eb%b0%a9%ed%99%94%eb%b2%bd-%ea%b4%80%eb%a6%ac-ssh-%ed%8f%ac%ed%8a%b8-%eb%b3%80%ea%b2%bd-%eb%b0%8f-%ed%82%a4-%ea%b8%b0%eb%b0%98-%ec%9d%b8%ec%a6%9d","status":"publish","type":"post","link":"https:\/\/atmokpo.com\/w\/41654\/","title":{"rendered":"7.\ubcf4\uc548 \uc124\uc815 \ubc0f \ubc29\ud654\ubcbd \uad00\ub9ac, SSH \ud3ec\ud2b8 \ubcc0\uacbd \ubc0f \ud0a4 \uae30\ubc18 \uc778\uc99d \uc124\uc815\uc73c\ub85c \ubcf4\uc548 \uac15\ud654"},"content":{"rendered":"

<\/p>\n

1. \uc11c\ub860<\/h2>\n

\n \uc6f9 \uc11c\ubc84\ub97c \uc6b4\uc601\ud558\uba74\uc11c \uac00\uc7a5 \uc911\uc694\ud55c \uace0\ub824 \uc0ac\ud56d \uc911 \ud558\ub098\ub294 \ubcf4\uc548\uc785\ub2c8\ub2e4. \uc11c\ubc84\uac00 \ud574\ud0b9\ub2f9\ud558\uac70\ub098 \uc545\uc758\uc801\uc778 \uacf5\uaca9\uc744 \ubc1b\uc73c\uba74 \uc6f9\uc0ac\uc774\ud2b8\uac00 \ub2e4\uc6b4\ub418\uac70\ub098 \ub370\uc774\ud130\uac00 \uc720\ucd9c\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.
\n \ub530\ub77c\uc11c, \uc774\ub7ec\ud55c \uc704\ud5d8\uc744 \ucd5c\uc18c\ud654\ud558\uae30 \uc704\ud55c \ub2e4\uc591\ud55c \ubcf4\uc548 \uc124\uc815\uc774 \ud544\uc694\ud569\ub2c8\ub2e4. \ubcf8 \uae00\uc5d0\uc11c\ub294 \uc6b0\ubd84\ud22c \uc11c\ubc84\uc758 \ubcf4\uc548\uc744 \uac15\ud654\ud558\uae30 \uc704\ud574 \ud544\uc218\uc801\uc73c\ub85c \uc124\uc815\ud574\uc57c \ud560 \uc0ac\ud56d\uc5d0 \ub300\ud574 \uc54c\uc544\ubd05\ub2c8\ub2e4.\n <\/p>\n

2. SSH \ud3ec\ud2b8 \ubcc0\uacbd<\/h2>\n

\n \uae30\ubcf8\uc801\uc73c\ub85c SSH\ub294 \ud3ec\ud2b8 22\uc5d0\uc11c \uc2e4\ud589\ub429\ub2c8\ub2e4. \ub9ce\uc740 \ud574\ucee4\ub4e4\uc774 \uc774 \uae30\ubcf8 \ud3ec\ud2b8\ub97c \ud0c0\uac9f\uc73c\ub85c \uc0bc\uae30 \ub54c\ubb38\uc5d0, \ud3ec\ud2b8\ub97c \ubcc0\uacbd\ud568\uc73c\ub85c\uc368 \uc790\ub3d9\ud654\ub41c \uacf5\uaca9\uc744 \ud53c\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n <\/p>\n

2.1 SSH \ud3ec\ud2b8 \ubcc0\uacbd \ubc29\ubc95<\/h3>\n

\n SSH \ud3ec\ud2b8\ub97c \ubcc0\uacbd\ud558\uace0\uc790 \ud560 \ub54c\ub294 \ub2e4\uc74c\uacfc \uac19\uc774 \uc9c4\ud589\ud569\ub2c8\ub2e4.\n <\/p>\n

 \nsudo nano \/etc\/ssh\/sshd_config\n    <\/code><\/pre>\n
\n        \uc704 \uba85\ub839\uc5b4\ub97c \uc785\ub825\ud558\uba74 SSH \uc124\uc815 \ud30c\uc77c\uc774 \uc5f4\ub9ac\uac8c \ub429\ub2c8\ub2e4. \uc774 \ud30c\uc77c\uc5d0\uc11c Port 22<\/code>\ub97c \ucc3e\uc544 \ub2e4\ub978 \ud3ec\ud2b8 \ubc88\ud638(\uc608: 2222)\ub85c \ubcc0\uacbd\ud569\ub2c8\ub2e4.\n    <\/p>\n
 \nPort 2222\n    <\/code><\/pre>\n
\n        \uc124\uc815\uc744 \ubcc0\uacbd\ud55c \ud6c4, \ud30c\uc77c\uc744 \uc800\uc7a5\ud558\uace0 \uc885\ub8cc\ud569\ub2c8\ub2e4. \uadf8\ub7f0 \ub2e4\uc74c SSH \uc11c\ube44\uc2a4\ub97c \uc7ac\uc2dc\uc791\ud569\ub2c8\ub2e4.\n    <\/p>\n
 \nsudo systemctl restart sshd\n    <\/code><\/pre>\n
\n        \uc774\uc81c \uc0c8\ub85c\uc6b4 \ud3ec\ud2b8\ub85c SSH\uc5d0 \uc811\uc18d\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4, \ub2e4\uc74c \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc5ec SSH\uc5d0 \uc811\uc18d\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n    <\/p>\n
 \nssh username@server_ip -p 2222\n    <\/code><\/pre>\n
3. \ud0a4 \uae30\ubc18 \uc778\uc99d \uc124\uc815<\/h2>\n
\n        \ud0a4 \uae30\ubc18 \uc778\uc99d\uc740 \ube44\ubc00\ubc88\ud638\ubcf4\ub2e4 \ub354 \uc548\uc804\ud55c \uc778\uc99d \ubc29\uc2dd\uc73c\ub85c, \uac1c\uc778\ud0a4\uc640 \uacf5\uac1c\ud0a4 \uc30d\uc744 \uc0ac\uc6a9\ud558\uc5ec SSH \uc811\uadfc\uc744 \ud5c8\uc6a9\ud569\ub2c8\ub2e4. \ube44\ubc00\ubc88\ud638\ub97c \ud1b5\ud574 \uc778\uc99d\ud558\ub294 \uac83\ubcf4\ub2e4 \uc548\uc804\uc131 \uba74\uc5d0\uc11c \uc720\ub9ac\ud569\ub2c8\ub2e4.\n    <\/p>\n
3.1 SSH \ud0a4 \uc0dd\uc131<\/h3>\n
\n        \uba3c\uc800 \ud074\ub77c\uc774\uc5b8\ud2b8 PC\uc5d0\uc11c SSH \ud0a4\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uc544\ub798 \uba85\ub839\uc5b4\ub97c \uc2e4\ud589\ud558\uc5ec SSH \ud0a4\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4.\n    <\/p>\n
 \nssh-keygen -t rsa -b 4096\n    <\/code><\/pre>\n
\n        \uba85\ub839\uc5b4\ub97c \uc2e4\ud589\ud558\uba74 \ud0a4 \ud30c\uc77c\uc758 \uc800\uc7a5 \uacbd\ub85c\uc640 \ube44\ubc00\ubc88\ud638\ub97c \uc785\ub825\ud558\ub77c\ub294 \uba54\uc2dc\uc9c0\uac00 \ub098\ud0c0\ub0a9\ub2c8\ub2e4. \uae30\ubcf8\uc801\uc73c\ub85c ~\/.ssh\/id_rsa<\/code>\uc5d0 \uc800\uc7a5\ub429\ub2c8\ub2e4.\n    <\/p>\n
3.2 SSH \uacf5\uac1c\ud0a4\ub97c \uc11c\ubc84\uc5d0 \ubcf5\uc0ac<\/h3>\n
\n        \uc0dd\uc131\ud55c \uacf5\uac1c\ud0a4\ub97c \uc6b0\ubd84\ud22c \uc11c\ubc84\ub85c \ubcf5\uc0ac\ud569\ub2c8\ub2e4. \uc544\ub798 \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc5ec \uacf5\uac1c\ud0a4\ub97c \ubcf5\uc0ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n    <\/p>\n
 \nssh-copy-id -i ~\/.ssh\/id_rsa.pub username@server_ip -p 2222\n    <\/code><\/pre>\n
\n        \uc774\ud6c4 \uc811\uc18d\ud560 \ub54c \ube44\ubc00\ubc88\ud638 \ub300\uc2e0 SSH \ud0a4\ub97c \uc0ac\uc6a9\ud574 \ub85c\uadf8\uc778\uc774 \uac00\ub2a5\ud569\ub2c8\ub2e4.<\/p>\n
4. \ubc29\ud654\ubcbd \uc124\uc815(UFW)<\/h2>\n
\n        \uc6b0\ubd84\ud22c\uc5d0 \ub0b4\uc7a5\ub41c \ubc29\ud654\ubcbd\uc778 UFW(Uncomplicated Firewall)\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud3ec\ud2b8 \uc811\uadfc\uc744 \uc81c\uc5b4\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \ubc29\ud654\ubcbd\uc744 \ud65c\uc6a9\ud574 SSH\uc640 \uc6f9 \uc11c\ubc84 \ub4f1 \ud544\uc694\ud55c \ud3ec\ud2b8\ub9cc \uc5f4\uc5b4\uc8fc\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4.\n    <\/p>\n
4.1 UFW \uc124\uce58 \ubc0f \ud65c\uc131\ud654<\/h3>\n
\n        UFW\ub294 \uae30\ubcf8\uc801\uc73c\ub85c \uc124\uce58\ub418\uc5b4 \uc788\uc9c0\ub9cc, \uc124\uce58 \uc5ec\ubd80\ub97c \ud655\uc778\ud558\uace0 \ud65c\uc131\ud654 \uacfc\uc815\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.\n    <\/p>\n
 \nsudo ufw enable\n    <\/code><\/pre>\n
4.2 SSH \ubc0f \uc6f9 \ud3ec\ud2b8 \ud5c8\uc6a9<\/h3>\n
\n        \uc55e\uc11c \ubcc0\uacbd\ud55c SSH \ud3ec\ud2b8\ub97c \ud5c8\uc6a9\ud558\uace0, HTTP \ubc0f HTTPS \ud3ec\ud2b8\ub97c \ud5c8\uc6a9\ud569\ub2c8\ub2e4.\n    <\/p>\n
 \nsudo ufw allow 2222\/tcp\nsudo ufw allow 80\/tcp\nsudo ufw allow 443\/tcp\n    <\/code><\/pre>\n
4.3 \ubc29\ud654\ubcbd \uc0c1\ud0dc \ud655\uc778<\/h3>\n
\n        \ubc29\ud654\ubcbd \uc124\uc815\uc774 \uc81c\ub300\ub85c \ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud558\ub824\uba74 \ub2e4\uc74c \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4.\n    <\/p>\n
 \nsudo ufw status\n    <\/code><\/pre>\n
\n        \uc774\ub97c \ud1b5\ud574 \uc5f4\ub9b0 \ud3ec\ud2b8\uc640 \ucc28\ub2e8\ub41c \ud3ec\ud2b8\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n    <\/p>\n
5. Fail2ban \uc124\uce58<\/h2>\n
\n        Fail2ban\uc740 \uc11c\ubc84\uc5d0 \ub300\ud55c \ubb34\ucc28\ubcc4 \ub300\uc785 \uacf5\uaca9\uc744 \ubc29\uc9c0\ud558\uae30 \uc704\ud574 IP\ub97c \ucc28\ub2e8\ud558\ub294 \ud6cc\ub96d\ud55c \ub3c4\uad6c\uc785\ub2c8\ub2e4. \uacf5\uaca9\uc774 \uac10\uc9c0\ub418\uba74 \ud574\ub2f9 IP\ub97c \ubc29\ud654\ubcbd\uc5d0\uc11c \ucc28\ub2e8\ud569\ub2c8\ub2e4.\n    <\/p>\n
5.1 Fail2ban \uc124\uce58<\/h3>\n
\n        \ub2e4\uc74c \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc5ec Fail2ban\uc744 \uc124\uce58\ud569\ub2c8\ub2e4.\n    <\/p>\n
 \nsudo apt-get install fail2ban\n    <\/code><\/pre>\n
5.2 Fail2ban \uc124\uc815<\/h3>\n
\n        \uc124\uce58\uac00 \uc644\ub8cc\ub418\uba74 \uae30\ubcf8 \uc124\uc815 \ud30c\uc77c\uc744 \ubcf5\uc0ac\ud558\uc5ec \uc0ac\uc6a9\uc790 \uc815\uc758 \uc124\uc815 \ud30c\uc77c\uc744 \uc0dd\uc131\ud569\ub2c8\ub2e4.\n    <\/p>\n
 \nsudo cp \/etc\/fail2ban\/jail.conf \/etc\/fail2ban\/jail.local\n    <\/code><\/pre>\n
\n        \uadf8 \ud6c4, jail.local<\/code> \ud30c\uc77c\uc744 \uc5f4\uc5b4 \uc124\uc815\uc744 \uc870\uc815\ud569\ub2c8\ub2e4.\n    <\/p>\n
\nsudo nano \/etc\/fail2ban\/jail.local\n    <\/code><\/pre>\n
\n        \uc608\ub97c \ub4e4\uc5b4 SSH \ubcf4\ud638\ub97c \uc704\ud574 \ub2e4\uc74c \uc124\uc815\uc744 \ucd94\uac00\ud569\ub2c8\ub2e4.\n    <\/p>\n
\n[sshd]\nenabled = true\nport = 2222\nfilter = sshd\nlogpath = \/var\/log\/auth.log\nmaxretry = 5\nbantime = 600\n    <\/code><\/pre>\n
6. \uc815\ub9ac \ubc0f \uacb0\ub860<\/h2>\n
\n        \uc704\uc5d0\uc11c \uc124\uba85\ud55c \ubc29\ubc95\ub4e4\uc740 \uc6b0\ubd84\ud22c \uc11c\ubc84\uc758 \ubcf4\uc548\uc744 \uac15\ud654\ud558\ub294 \ub370 \ub9e4\uc6b0 \ud6a8\uacfc\uc801\uc785\ub2c8\ub2e4. SSH \ud3ec\ud2b8 \ubcc0\uacbd, \ud0a4 \uae30\ubc18 \uc778\uc99d \uc124\uc815, UFW \ubc0f Fail2ban\uacfc \uac19\uc740 \ub3c4\uad6c\ub97c \ud65c\uc6a9\ud568\uc73c\ub85c\uc368,
\n        \ub2e4\uc591\ud55c \uacf5\uaca9\uc73c\ub85c\ubd80\ud130 \uc11c\ubc84\ub97c \ubcf4\ud638\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ubcf4\uc548 \uc870\uce58\ub294 \ucd94\uac00\uc801\uc778 \ub3c4\uad6c\uc640 \uc124\uc815\uacfc \ud568\uaed8 \uc0ac\uc6a9\ub420 \ub54c \ub354\uc6b1 \ud6a8\uacfc\uc801\uc785\ub2c8\ub2e4. \ub530\ub77c\uc11c, \uc9c0\uc18d\uc801\uc778 \ubcf4\uc548 \uc810\uac80\uacfc \uc5c5\ub370\uc774\ud2b8\uac00 \ud544\uc694\ud569\ub2c8\ub2e4.\n    <\/p>\n
7. \ucc38\uace0 \uc790\ub8cc<\/h2>\n