Our SSH configuration is a lot more secure than it used to be, but we can still make it better. Here are a few little tricks that you might not have seen elsewhere.
Configuring other miscellaneous security settings
Disabling X11 forwarding
When you SSH into a server in the normal manner, as we've been doing, you can only run text-mode programs. If you try to remotely run any GUI-based program, such as Firefox, you'll get an error message. But, when you open the sshd_config file of pretty much any Linux distribution, you'll see this line:
X11Forwarding yes
This means that with the right option switch, you can remotely run GUI-based programs. Assuming that you're logging into a machine that has a graphical...
