How to Show Security Warning Message to SSH Unauthorized Users

SSH banner warnings are crucial when companies or organizations want to show a strict warning message to discourage unauthorized users from accessing a Linux server.

These SSH banner warning messages are displayed just before the SSH password prompt so that unauthorized users who are about to gain access are made aware of the aftermath of doing so. Typically, these warnings are legal consequences that unauthorized users can suffer should they decide to ahead with accessing the server.

Be cautious that a banner warning is by no means a way of blocking unauthorized users from logging in. The warning banner is simply a warning meant to warn unauthorized users from logging in. If you want to block unauthorized users from logging in, then additional SSH configurations are required.

The SSH banner contains some security warning information or general information. Following are some example SSH banner messages which I use on my Linux servers.

Example SSH Banner Message 1:

#################################################################
#                   _    _           _   _                      #
#                  / \  | | ___ _ __| |_| |                     #
#                 / _ \ | |/ _ \ '__| __| |                     #
#                / ___ \| |  __/ |  | |_|_|                     #
#               /_/   \_\_|\___|_|   \__(_)                     #
#                                                               #
#  You are entering into a secured area! Your IP, Login Time,   #
#   Username has been noted and has been sent to the server     #
#                       administrator!                          #
#   This service is restricted to authorized users only. All    #
#            activities on this system are logged.              #
#  Unauthorized access will be fully investigated and reported  #
#        to the appropriate law enforcement agencies.           #
#################################################################

Example SSH Banner Message 2:

ALERT! You are entering a secured area! Your IP, Login Time, and Username have been noted and have been sent to the server administrator!
This service is restricted to authorized users only. All activities on this system are logged.
Unauthorized access will be fully investigated and reported to the appropriate law enforcement agencies.

There are two ways to display messages one is using the issue.net file and the second one is using the MOTD file.

  • /etc/issue.net – Display a warning banner message before the password login prompt.
  • /etc/motd – Display a welcome banner message after the user has logged in.

So, I strongly recommended all system administrators display banner messages before allowing users to log in to systems. Just follow below simple steps to enable SSH logging messages.

Display SSH Warning Message to Users Before Login

To display SSH warning messages to all unauthorized users, you need to access the /etc/issue.net file to display banner messages using your preferred text editor.

$ sudo vi /etc/issue.net
Or
$ sudo nano /etc/issue.net

Add the following banner sample message and save the file. You can add any custom banner message to this file.

#################################################################
#                   _    _           _   _                      #
#                  / \  | | ___ _ __| |_| |                     #
#                 / _ \ | |/ _ \ '__| __| |                     #
#                / ___ \| |  __/ |  | |_|_|                     #
#               /_/   \_\_|\___|_|   \__(_)                     #
#                                                               #
#  You are entering into a secured area! Your IP, Login Time,   #
#   Username has been noted and has been sent to the server     #
#                       administrator!                          #
#   This service is restricted to authorized users only. All    #
#            activities on this system are logged.              #
#  Unauthorized access will be fully investigated and reported  #
#        to the appropriate law enforcement agencies.           #
#################################################################

Next, open the /etc/ssh/sshd_config configuration file.

$ sudo vi /etc/ssh/sshd_config
Or
$ sudo nano /etc/ssh/sshd_config

Search for the word “Banner” and uncomment out the line and save the file.

#Banner /some/path

It should be like this.

Banner /etc/issue.net (you can use any path you want)
SSH Banner Path
SSH Banner Path

Next, restart the SSH daemon to reflect new changes.

$ sudo systemctl restart sshd
Or
$ sudo service restart sshd

Now try to connect to the server you will see a banner message similar to below.

SSH Warning Banner Message
SSH Warning Banner Message

Display SSH Welcome Message to Users After Login

To display SSH welcome banner messages after login, we use /etc/motd file, which is used to display banner messages after login.

$ sudo vi /etc/motd
Or
$ sudo nano /etc/motd

Place the following welcome banner sample message and save the file.

###############################################################
#                        TECMINT.COM                          #
###############################################################
#                  Welcome to TecMint.com!                    #
#       All connections are monitored and recorded.           #
#  Disconnect IMMEDIATELY if you are not an authorized user!  #
###############################################################

Now again try to login into the server you will get both banner messages. See the screenshot attached below.

SSH Banner Messages
SSH Banner Messages

And that’s it. We hope you can now add your own custom SSH banner messages on your server to warn unauthorized users from accessing the system.

If you liked this article, then do subscribe to email alerts for Linux tutorials. If you have any questions or doubts? do ask for help in the comments section.

If You Appreciate What We Do Here On TecMint, You Should Consider:

TecMint is the fastest growing and most trusted community site for any kind of Linux Articles, Guides and Books on the web. Millions of people visit TecMint! to search or browse the thousands of published articles available FREELY to all.

If you like what you are reading, please consider buying us a coffee ( or 2 ) as a token of appreciation.

Support Us

We are thankful for your never ending support.

31 thoughts on “How to Show Security Warning Message to SSH Unauthorized Users”

  1. In my office account I am getting messages like disk space, some other info related to the account. I checked in all files but i couldn’t find the path from where I am getting these massages.

    Reply
  2. If your idea of securing a system is displaying login messages, you need help. No unauthorized user is going to give a respect about your message and you’re just going to annoy legitimate users, especially when executing remote commands.

    Reply
  3. is it possible to run a shell command from within the banner.txt or the issue.met files.
    ( i’d like to run the clear command after login)

    Reply
    • @Ted,

      No, I don’t think so we can able to run any command or script via these files, these files are used to display a text once the user logged into the shell..

      Reply
  4. Suppose, I have more than 100 Linux server in this case what should I have to do..? It’s very time consuming to set banner in all the servers.. Is there any another solution for same..?? Like I can set banner on one single server and It will show for all the servers.

    Reply
  5. i am getting a message after login (it is just a simple text no error or any thing) i can login only as guest not a root user and i want to remove that text please help

    Reply
    • @Yugansh,
      Which error message you getting on the login screen? can you share the screen grab to get the idea..or else you can remove the text in motd file..

      Reply

Got something to say? Join the discussion.

Have a question or suggestion? Please leave a comment to start the discussion. Please keep in mind that all comments are moderated and your email address will NOT be published.