[dda]

Hi,

I spent a few days trying to install sshwindows (from sshwindows.sourceforge.net). Well had some problems but now I get it, so I thought I sould share it.

This will give local ssh access to "administrator" from any ip address (SO, BE CAREFULL!!!).

1) Download it from:
sshwindows.sourceforge.net

2) Install it, ignore the passwd and group warning at the end.
3) Copy the installed file from c:\program files\openssh to your cd at:
$OEM$\$PROGS\OpenSSH
4) Delete all these files that start with ssh_host_
here: $OEM$\$PROGS\OpenSSH\etc\
You should have delete these 6 files:
ssh_host_key
ssh_host_key.pub
ssh_host_rsa
ssh_host_rsa.pub
ssh_host_dsa
ssh_host_dsa.pub

5) You need to allow ssh through the winxpsp2 firewall, so add these lines to your winnt.sif:

[WindowsFirewall]
Profiles = WindowsFirewall.Standard
LogFile = "%SYSTEMDRIVE%\logs\pfirewall.log"
LogSize = 4096
LogDroppedPackets = 1
LogConnections = 1

[WindowsFirewall.Standard]
Type = 3
Mode = 1
Exceptions = 1
Notifications = 1
MulticastBroadcastResponse = 0
PortOpenings = WindowsFirewall.SSHD

[WindowsFirewall.SSHD]
Protocol = 6
Port = 22
Name = OpenSSHD
Mode = 1
Scope = 1

(I hope I didn't make a mistake now, as I made a modified cut and paste from my original settings).

You may skeep this firewall entries and add this to a batch file if you want:
netsh firewall add portopening tcp 22 openssh

6) My cmdlines.txt launches a batch file to execute the runonce stuff. Here are the ssh runonceex.cmd lines:
REG ADD %KEY%\02 /VE /D "Activating OpenSSH (SECURITY)" /f
REG ADD %KEY%\02 /V 1 /D "cmd /c start /I /wait %SYSTEMDRIVE%\progra~1\openssh\activate.cmd"

(it wrapped the second line, it needs to be in one line!!!)

7) Save the file activate.cmd in (see attachment  OpenSSH.rar (2.79K)
Number of downloads: 36):
%OEM%\$PROGS\OpenSSH

8) An finally save the file settings.reg (see attachment  OpenSSH.rar (2.79K)
Number of downloads: 36), in
%OEM%\$PROGS\OpenSSH

Now reboot (IT IS NECESSARY TO REBOOT!!)

Voilà, ssh to your machine

P.S. Do not use cmdow in your batch file or ssh-keygen will fail, as it needs an output window!!!!

If you combine ssh tunneling with realvnc and/or rdp you have very secure remote access!


Hope this helps, if not, post your comments or questionsundefined