Hiding Connections
It is recommended to hide connections to any servers running on your machine to avoid disclosing unnecessary information.
The recommended way to accomplish this is to hide all connections and only respond to queries for certain user accounts:
default {
default {
force hide
}
}
user "ryan" {
default {
force reply "ryan"
}
}
It is also possible to hide individual users' connections:
user "root" {
default {
force hide
}
}
user "http" {
default {
force hide
}
}
Alternatively, the random
and
random_numeric
capabilities may be used to conceal
users' real login names while still allowing the system administrator to
identify who was responsible for a particular connection.
See the list of capabilities for more information.