Replies: 1 comment
-
Alright, I found the configs I am looking for. There are actually 2 config settings if you want to hardened the server. As stated in the documentation. server_version, string. Allow some degree of customization for the advertised software version. Set to short to hide the SFTPGo version number, if different from short the default will be used. Default: blank. login_banner_file, path to the login banner file. The contents of the specified file, if any, are sent to the remote user before authentication is allowed. It can be a path relative to the config dir or an absolute one. Leave empty to disable login banner. First one is to not show the version of SFTPgo. This is important to avoid hackers knowing which version is running and use known vulnerability to hack. Second one is just some welcome message to users to notify them about things like copyrights or usage policies. Thank you @drakkan for thinking of all these. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
When login to SFTP, there is a message that says "SSH-2.0-SFTPGo_2.6.2". Can this be customized to include rules/caveats for SFTP usage? Or to just change it to "SFTP this is mine". Most concerning is that it shows the SFTPGo version which potentially is a security risk.
Beta Was this translation helpful? Give feedback.
All reactions