Koozali.org: home of the SME Server

alternative sshd port

P Kidd

alternative sshd port
« on: November 29, 2002, 09:38:55 PM »
I added Port 23 to sshd_config, and a specific external IP address to hosts.allow (SSHD: externalip/32 : ALLOW) and changed /etc/services port 23 to ssh from telnet, restarted sshd and I can only connect through port 22 not port 23 from the specific external address (internally no problem either port) - does ipchains block the "telnet" port?

P Kidd

Re: alternative sshd port
« Reply #1 on: November 30, 2002, 02:58:34 AM »
P Kidd wrote:
 
> hosts.allow (SSHD: externalip/32 : ALLOW)

this entry is redundant

> does ipchains block the "telnet" port?

I guess so as when I inserted the following line port 23 external access works, but is this ipchains insertion OK?  Port 22 accepts any ip address, and if I just Append the following, external access is blocked so it seems OK to me :-)

ipchains -I input -p tcp -s externalip/32 --dport 23 -i eth1 -j ACCEPT