Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    My pfsense failed an audit by securitymetrics.com

    Scheduled Pinned Locked Moved Firewalling
    46 Posts 6 Posters 21.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K Offline
      kapara
      last edited by

      I am able to get in no matter what…

      Skype ID:  Marinhd

      1 Reply Last reply Reply Quote 0
      • J Offline
        jlepthien
        last edited by

        Log in again and then do:

        • cd /root
        • cd .ssh
        • ls -la (post output, there should be a authorized_keys files after you pasted your key via GUI)

        Are you running on embedded?

        | apple fanboy | music lover | network and security specialist | in love with cisco systems |

        1 Reply Last reply Reply Quote 0
        • K Offline
          kapara
          last edited by

          Yes Embedded….

          [1.2.3-RELEASE]                                                                [root@wall.test.local]/root(1): cd /root
          [1.2.3-RELEASE]                                                                [root@wall.test.local]/root(2): cd .ssh
          [1.2.3-RELEASE]                                                                [root@wall.test.local]/root/.ssh(3): ls -la
          total 1
          drwx–----  2 root  wheel  512 Mar  4 07:49 .
          drwxr-xr-x  4 root  wheel  512 Mar  4 05:08 ..
          [1.2.3-RELEASE]                                                                [root@wall.test.local]/root/.ssh(4):

          Skype ID:  Marinhd

          1 Reply Last reply Reply Quote 0
          • J Offline
            jlepthien
            last edited by

            So there is something wrong with your install. The authorized_keys file does not get created.

            Try this:

            • /etc/rc.conf_mount_rw
            • then create the file manually with e.g. vi /root/.ssh/authorized_keys and paste in your key
            • /etc/rc.conf_mount_ro

            Then check again…

            | apple fanboy | music lover | network and security specialist | in love with cisco systems |

            1 Reply Last reply Reply Quote 0
            • K Offline
              kapara
              last edited by

              vi/root/.ssh/authorized_keys: Command not found.

              Skype ID:  Marinhd

              1 Reply Last reply Reply Quote 0
              • K Offline
                kapara
                last edited by

                here is a screen shot via winscp….

                Capture.PNG
                Capture.PNG_thumb

                Skype ID:  Marinhd

                1 Reply Last reply Reply Quote 0
                • J Offline
                  jlepthien
                  last edited by

                  vi and a [space] after that…

                  | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                  1 Reply Last reply Reply Quote 0
                  • J Offline
                    jlepthien
                    last edited by

                    @kapara:

                    here is a screen shot via winscp….

                    So? That is /etc/ssh and on your box…
                    You generated the key on your windows system, didn't you?
                    The keys need to be in /root/.ssh/

                    | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                    1 Reply Last reply Reply Quote 0
                    • K Offline
                      kapara
                      last edited by

                      Still no go.  Where can I find that file I created?  I can log in even though the data shows as there in advanced.

                      Skype ID:  Marinhd

                      1 Reply Last reply Reply Quote 0
                      • K Offline
                        kapara
                        last edited by

                        Found it in Winscp

                        Capture.PNG
                        Capture.PNG_thumb

                        Skype ID:  Marinhd

                        1 Reply Last reply Reply Quote 0
                        • J Offline
                          jlepthien
                          last edited by

                          Yep. So it should be there via ssh, too. If it still does not work I have no idea left what could be wrong.

                          | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                          1 Reply Last reply Reply Quote 0
                          • K Offline
                            kapara
                            last edited by

                            I will reboot

                            Skype ID:  Marinhd

                            1 Reply Last reply Reply Quote 0
                            • K Offline
                              kapara
                              last edited by

                              Working. :-) Thanks

                              Skype ID:  Marinhd

                              1 Reply Last reply Reply Quote 0
                              • J Offline
                                jlepthien
                                last edited by

                                Glad it is working now ;-)

                                | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.