Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

sshd_config

Discussion in 'Security' started by debug, Dec 25, 2013.

  1. debug

    debug Member

    Joined:
    Apr 19, 2003
    Messages:
    23
    Likes Received:
    0
    Trophy Points:
    151
    Hello,

    I am looking to change the port 22 of my VPS for another port in etc/sshd_config. Right now, Password Authentication is currently disabled in Security/WHM.

    I am looking at my sshd_config more carefully. I compare with the example of sshd_config File given to Securing SSH

    Questions:

    1) In my sshd_config file, I see: PasswordAuthenticationno (without empty space between PasswordAuthentication and No). In the example of cPanel, there is an empty space. Is it normal ?

    2) I do not think I'll use SSH / port 22 on this server. Right now, Password Authentication is disabled in Security/WHM. Therefore, can I erase without problem the port 22 in Allow incoming TCP ports of the CSF firewall configuration file ? Sorry if the question is stupid. :)

    3) Can I choose one of the following port (below 1024): 223, 223 ... 299 (by example).

    4) Do I have to change ListenAddress with my own IP for better security ?

    Regards
     
    #1 debug, Dec 25, 2013
  2. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    1,010
    Likes Received:
    87
    Trophy Points:
    78
    cPanel Access Level:
    DataCenter Provider
    1) there should be a space as far as I know.

    2) yes, you can close the port 22 once you move SSH to another port. Be sure to open that port first.

    3) yes you can use any other un-used TCP port.

    4) Listen address just tells the server which of it's own IP's to listen on. Leaving it default means you can SSH to any IP allocated to the server. If you change it to one of the IP's assigned to the server, that is the only IP that will accept SSH connections.
     
    #2 quizknows, Dec 25, 2013
  3. debug

    debug Member

    Joined:
    Apr 19, 2003
    Messages:
    23
    Likes Received:
    0
    Trophy Points:
    151
    1) There is no space in sshd_config and its a new server since three days The file have been opened/edited today but not by me. Maybe it's a bad writing from WHM (it's the last version release).

    2) I would like only disable password auth in WHM Security and remove the port 22 inside the two lists of CSF config file. I don't want use/move the port 22. My VPS is managed.
     
    #3 debug, Dec 25, 2013
  4. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    1,010
    Likes Received:
    87
    Trophy Points:
    78
    cPanel Access Level:
    DataCenter Provider
    cPanel doesn't install the stock sshd_config file, your operating system package manager (i.e. RPM or yum) does.

    What I'm saying is you can remove port 22 from csf config for open ports, but you have to add the new ssh port number to open ports before you change the port that SSH is using in sshd_config.
     
    #4 quizknows, Dec 25, 2013
  5. debug

    debug Member

    Joined:
    Apr 19, 2003
    Messages:
    23
    Likes Received:
    0
    Trophy Points:
    151
    Yes, you are right.

    But my question was can I only delete the port 22 in incoming/outcoming ports CSF listing and forget the rest (without edit sshd_config) ? I am alone on my VPS (my own website) and the hoster have access to SSH with their tools.
     
    #5 debug, Dec 25, 2013
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,711
    Likes Received:
    1,794
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Yes, you can do this but keep in mind that SSH will not be accessible. You will have to contact your hosting provider in the event WHM fails to load.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 cPanelMichael, Dec 26, 2013
(You must log in or sign up to post here.)

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice