Sale!
SSH Hardening Pack for Ubuntu 24.04, ₹99

SSH Hardening Pack for Ubuntu 24.04

Original price was: ₹199.Current price is: ₹99.

The tested sshd_config drop-ins, a fail2ban jail that never bans you, a guided install script that refuses to lock you out, a verify script, a log-triage script and a printable 4-page checklist. Everything we use on our own servers, tested with OpenSSH 9.6p1 and fail2ban 1.0.2 on Ubuntu 24.04.

Instant digital download. All sales are final: this product is non-refundable once delivered. Please check the included files above before buying. See our Refund & Cancellation Policy.

SKU: YC-SSH-PACK-1 Category:

Description

What’s in the ZIP (13 files, 95 KB)

  • sshd_config.d/10-hardening.conf: key-only logins, no root, no passwords, AllowGroups sshusers, forwarding off, verbose logging. The first-value-wins trap with Ubuntu’s 50-cloud-init.conf is handled by the file name.
  • sshd_config.d/20-crypto.conf: modern key exchange, ciphers and MACs; passes ssh-audit’s “Hardened Ubuntu Server 24.04 LTS (v2)” policy.
  • fail2ban/jail.local: sshd jail with the systemd backend, aggressive mode, escalating bans (1h → 1 week) and an ignoreip line for your office and VPN.
  • fail2ban/nftables-ssh-ratelimit.nft: optional kernel-level rate limit on new SSH connections.
  • scripts/install.sh: refuses to run unless your admin key works, creates the group, installs the drop-ins, validates with sshd -t, reloads (never restarts) sshd, installs fail2ban.
  • scripts/verify.sh: proves every setting is in effect and shows fail2ban and firewall state.
  • scripts/ssh-log-triage.sh: who is attacking, which usernames, and whether anyone got in after failures.
  • checklist.pdf: safe rollout order, settings table, verification, fail2ban, “if an attacker logged in” with the CERT-In 6-hour rule.
  • README.md: the 10-minute rollout, exceptions for one account, port change and TOTP notes.

Who it is for

Anyone who runs Ubuntu servers with port 22 reachable from the internet: sysadmins, DevOps engineers, agencies that manage client servers, and founders who look after their own VPS. One purchase covers one company, any number of its servers.

Why not just copy the free guide?

You can; the free SSH hardening checklist explains every setting. The pack saves the hour of assembling, testing and re-typing: the files are ready to install, the install script checks the things that lock people out, and the verify script tells you it worked.

Support

Email contact@youngstercompany.com with “SSH pack” in the subject; we reply within one working day. If you want the whole server checked, not only SSH, see the Linux server hardening audit.

Related products