diff --git a/Linode_Bitcoin-Core_VPS_Setup.stackscript b/Linode_Bitcoin-Core_VPS_Setup.stackscript index 034dce4..13750e6 100644 --- a/Linode_Bitcoin-Core_VPS_Setup.stackscript +++ b/Linode_Bitcoin-Core_VPS_Setup.stackscript @@ -1,17 +1,5 @@ #!/bin/bash -#### -# This is a Linode StackScript https://www.linode.com/stackscripts/ for deploying -# a Bitcoin node optimized for use on a VPS, for learning or testing purposes. -# -# WARNING: Don’t use a VPS for a bitcoin wallet with significant real funds — see -# http://blog.thestateofme.com/2012/03/03/lessons-to-be-learned-from-the-linode-bitcoin-incident/ -# it is just very nice to be able experiment with real bitcoin transactions on -# a live node without tying up a self-hosted server on a local network. I’ve -# also found it useful to be able to use an iPhone or iPad to communicate via -# SSH to my VPS to do some simple bitcoin tasks. -#### - # This block defines the variables the user of the script needs to input # when deploying using this script. # @@ -23,7 +11,7 @@ # FQDN= # # USERPASSWORD= -# +# # SSH_KEY= # # SYS_SSH_IP= @@ -109,6 +97,7 @@ cat > /etc/iptables.firewall.rules <> /etc/hosts.allow + echo "sshd: ALL" >> /etc/hosts.deny + echo "$0 - Limited SSH access." else - echo "$0 - There were no SSH IPs to set: $SYS_SSH_IP; you will not be able to SSH in!" + + echo "$0 - WARNING: Your SSH access is not limited; this is a major security hole!" + fi # Block SSH access from everywhere else @@ -156,8 +149,6 @@ fi # Yes, this means that if you don't have an IP address for SSH, you can only login # from Linode's Lish Console -echo "sshd: ALL" >> /etc/hosts.deny -echo "$0 - Limited SSH access." ####