Linux SSH port change

Discussion in 'Security' started by sendemi, Aug 18, 2010.

  1. #1
    Using the wrong password, the server administrator bfd trial knows very well. Linux and Windows servers are made for improved systems for malicious code to try day and night, can not stop stop work. I can log on to the server password which they do the experiment. Linux server from the ssh login "root" user's password is to guess the most common security issue is one. It can be done to prevent one of the solutions will change the SSH port. Solution to the linux server by logging in with ssh
    nano /etc/ssh/sshd_config
    command to change the settings of the SSH server is open. Then "Port 22" to find the line "22" instead of "we want a port number in the blank write in the head # 's are removed. "Ctrl + x" then "y" and are out to save the file by pressing enter. Now, to be active to change the ssh server restart is required to apply.
    service sshd restart
    Our process is finished and the command is given.
    IMPORTANT NOTE: The most important point to be careful we do not prohibit the port we are using the new port number apf our protection, and so we have to open. otherwise the server may not be able to access remotely.
     
    sendemi, Aug 18, 2010 IP
  2. MrYu

    MrYu Peon

    Messages:
    157
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #2
    First, changing the port number of your ssh server will not prevent anyone from attacking it if you keep it wide open. Scanning a box and determining that it's an ssh server listening on port 22993 is trivial. Security through obscurity never really works.

    Second, please stop littering the forum with useless and unreadable crap -- some people actually come here for useful information and your posts degrade the signal to noise ratio.
     
    MrYu, Aug 18, 2010 IP
  3. CaNeRiuM

    CaNeRiuM Peon

    Messages:
    10
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    thanks information
     
    CaNeRiuM, Aug 27, 2010 IP
  4. shearerc

    shearerc Active Member

    Messages:
    13
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    86
    #4
    Agreed.

    Security should be multi-layered.
    I do change my ssh port, but have also set up other defenses. Changing the port avoids lots of those noisy, automated script-kiddie scans.
     
    shearerc, Sep 18, 2010 IP
  5. CoderJosh

    CoderJosh Peon

    Messages:
    45
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Exactly. By changing the SSH port, you get rid of the "noise" that automated scans/attacks create. Also, in case of a zero-day remote SSH exploit, you'll most likely have more time to fix your system before you get hit.
     
    CoderJosh, Sep 19, 2010 IP