Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    My pfsense failed an audit by securitymetrics.com

    Scheduled Pinned Locked Moved Firewalling
    46 Posts 6 Posters 21.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J Offline
      jlepthien
      last edited by

      Log in again and then do:

      • cd /root
      • cd .ssh
      • ls -la (post output, there should be a authorized_keys files after you pasted your key via GUI)

      Are you running on embedded?

      | apple fanboy | music lover | network and security specialist | in love with cisco systems |

      1 Reply Last reply Reply Quote 0
      • K Offline
        kapara
        last edited by

        Yes Embedded….

        [1.2.3-RELEASE]                                                                [root@wall.test.local]/root(1): cd /root
        [1.2.3-RELEASE]                                                                [root@wall.test.local]/root(2): cd .ssh
        [1.2.3-RELEASE]                                                                [root@wall.test.local]/root/.ssh(3): ls -la
        total 1
        drwx–----  2 root  wheel  512 Mar  4 07:49 .
        drwxr-xr-x  4 root  wheel  512 Mar  4 05:08 ..
        [1.2.3-RELEASE]                                                                [root@wall.test.local]/root/.ssh(4):

        Skype ID:  Marinhd

        1 Reply Last reply Reply Quote 0
        • J Offline
          jlepthien
          last edited by

          So there is something wrong with your install. The authorized_keys file does not get created.

          Try this:

          • /etc/rc.conf_mount_rw
          • then create the file manually with e.g. vi /root/.ssh/authorized_keys and paste in your key
          • /etc/rc.conf_mount_ro

          Then check again…

          | apple fanboy | music lover | network and security specialist | in love with cisco systems |

          1 Reply Last reply Reply Quote 0
          • K Offline
            kapara
            last edited by

            vi/root/.ssh/authorized_keys: Command not found.

            Skype ID:  Marinhd

            1 Reply Last reply Reply Quote 0
            • K Offline
              kapara
              last edited by

              here is a screen shot via winscp….

              Capture.PNG
              Capture.PNG_thumb

              Skype ID:  Marinhd

              1 Reply Last reply Reply Quote 0
              • J Offline
                jlepthien
                last edited by

                vi and a [space] after that…

                | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                1 Reply Last reply Reply Quote 0
                • J Offline
                  jlepthien
                  last edited by

                  @kapara:

                  here is a screen shot via winscp….

                  So? That is /etc/ssh and on your box…
                  You generated the key on your windows system, didn't you?
                  The keys need to be in /root/.ssh/

                  | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                  1 Reply Last reply Reply Quote 0
                  • K Offline
                    kapara
                    last edited by

                    Still no go.  Where can I find that file I created?  I can log in even though the data shows as there in advanced.

                    Skype ID:  Marinhd

                    1 Reply Last reply Reply Quote 0
                    • K Offline
                      kapara
                      last edited by

                      Found it in Winscp

                      Capture.PNG
                      Capture.PNG_thumb

                      Skype ID:  Marinhd

                      1 Reply Last reply Reply Quote 0
                      • J Offline
                        jlepthien
                        last edited by

                        Yep. So it should be there via ssh, too. If it still does not work I have no idea left what could be wrong.

                        | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                        1 Reply Last reply Reply Quote 0
                        • K Offline
                          kapara
                          last edited by

                          I will reboot

                          Skype ID:  Marinhd

                          1 Reply Last reply Reply Quote 0
                          • K Offline
                            kapara
                            last edited by

                            Working. :-) Thanks

                            Skype ID:  Marinhd

                            1 Reply Last reply Reply Quote 0
                            • J Offline
                              jlepthien
                              last edited by

                              Glad it is working now ;-)

                              | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.