Does anyone know what ports I could use which are non standard for SSH, I dont want to use a port which is needed for something else. Thank you. Apologies if this isnt the right forum for this. Also, I would like to know what I need to do within sshd_config to turn off SSHv1, I have this currently: #Protocol 2 But apparently it still is turned on
Try port 666 - its supposed to be reserved for Doom (the computer game). A lot of computer games use port 27015 - such as left 4 dead. That way people doing port scans will think your running a game server instead of an SSH server.
Thanks Kevin, I think Ill just request our host to do it to a random non standard one since it is managed after all I still however want to disable SSHv1 myself so if anyone has any ideas let me know please.
Just have them disable it when they're changing your port. I think its done in the same place (ssh_config/sshd_config)
Remember any time you edit something in nix environment, you have to restart the service for the change to take effect.
If apache controls your SSH then its needed. But that'd be one messed up server You'll need to restart SSH service For example: Code: service sshd restart
It didnt seem to correct the problem with SSHv1 being enabled :shrug: do you happen to have any links to any server commands resources, im interested in prepping myself for when we need a dedi
Login as root Run the following two commands Code: echo "Protocol 2" >> /etc/ssh/sshd_config service sshd restart Should do the trick. Edit: If that doesn't work. 1. Login as root 2. locate the sshd_config file 3. Edit the file and remove any thing that has " Protocol X" (X will most likely be 1) 4. At end of file add " Protocol 2" (without quotes) 5. Restart SSH
The first worked a treat, thank you! I also need to disable XFS too, ive tried: service xfs stop chkconfig xfs off Without luck so far
You can simply know what port you should NOT use by checking your CSF installation and seeing what's already opened. I always change my dedicated servers port to weird numbers like 2134 or 4678, things like that.
change the port to anything which isn't 22, should be fine, also make sure you allow the port though the firewall before you change it else you wont be able to connect at all.