Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    My pfsense failed an audit by securitymetrics.com

    Scheduled Pinned Locked Moved Firewalling
    46 Posts 6 Posters 21.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K Offline
      kapara
      last edited by

      Yes Embedded….

      [1.2.3-RELEASE]                                                                [root@wall.test.local]/root(1): cd /root
      [1.2.3-RELEASE]                                                                [root@wall.test.local]/root(2): cd .ssh
      [1.2.3-RELEASE]                                                                [root@wall.test.local]/root/.ssh(3): ls -la
      total 1
      drwx–----  2 root  wheel  512 Mar  4 07:49 .
      drwxr-xr-x  4 root  wheel  512 Mar  4 05:08 ..
      [1.2.3-RELEASE]                                                                [root@wall.test.local]/root/.ssh(4):

      Skype ID:  Marinhd

      1 Reply Last reply Reply Quote 0
      • J Offline
        jlepthien
        last edited by

        So there is something wrong with your install. The authorized_keys file does not get created.

        Try this:

        • /etc/rc.conf_mount_rw
        • then create the file manually with e.g. vi /root/.ssh/authorized_keys and paste in your key
        • /etc/rc.conf_mount_ro

        Then check again…

        | apple fanboy | music lover | network and security specialist | in love with cisco systems |

        1 Reply Last reply Reply Quote 0
        • K Offline
          kapara
          last edited by

          vi/root/.ssh/authorized_keys: Command not found.

          Skype ID:  Marinhd

          1 Reply Last reply Reply Quote 0
          • K Offline
            kapara
            last edited by

            here is a screen shot via winscp….

            Capture.PNG
            Capture.PNG_thumb

            Skype ID:  Marinhd

            1 Reply Last reply Reply Quote 0
            • J Offline
              jlepthien
              last edited by

              vi and a [space] after that…

              | apple fanboy | music lover | network and security specialist | in love with cisco systems |

              1 Reply Last reply Reply Quote 0
              • J Offline
                jlepthien
                last edited by

                @kapara:

                here is a screen shot via winscp….

                So? That is /etc/ssh and on your box…
                You generated the key on your windows system, didn't you?
                The keys need to be in /root/.ssh/

                | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                1 Reply Last reply Reply Quote 0
                • K Offline
                  kapara
                  last edited by

                  Still no go.  Where can I find that file I created?  I can log in even though the data shows as there in advanced.

                  Skype ID:  Marinhd

                  1 Reply Last reply Reply Quote 0
                  • K Offline
                    kapara
                    last edited by

                    Found it in Winscp

                    Capture.PNG
                    Capture.PNG_thumb

                    Skype ID:  Marinhd

                    1 Reply Last reply Reply Quote 0
                    • J Offline
                      jlepthien
                      last edited by

                      Yep. So it should be there via ssh, too. If it still does not work I have no idea left what could be wrong.

                      | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                      1 Reply Last reply Reply Quote 0
                      • K Offline
                        kapara
                        last edited by

                        I will reboot

                        Skype ID:  Marinhd

                        1 Reply Last reply Reply Quote 0
                        • K Offline
                          kapara
                          last edited by

                          Working. :-) Thanks

                          Skype ID:  Marinhd

                          1 Reply Last reply Reply Quote 0
                          • J Offline
                            jlepthien
                            last edited by

                            Glad it is working now ;-)

                            | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.