The service “sshd” appears to be down.

[Santi109]

How to fix this error? my server provider told me that some iptables rules blocking most of the ports.. I am really beginner to Linux CentOS..

Any help really appreciated..

Thanks

 

[24x7server]

Hi,

If you have a KVM, VNC, or IMPI access of your machine, then you will have to disable the firewall first on your machine..
Did you change the SSH port?

 

[Santi109]

I was reinstall sshd with success, what configuration I need to do?

sshd was running. but i dont know if I need to make configuration to secure it?

Hi,

If you have a KVM, VNC, or IMPI access of your machine, then you will have to disable the firewall first on your machine..
Did you change the SSH port?

I dont change the SSH port. it is 22.. does i need to disable firewall now?

 

[SysSachin]

sshd was running. but i dont know if I need to make configuration to secure it?

To secure SSHD you have to change ssh port as well as disable direct root access.

Did you installed any other firewall on your server ? like csf or apf ?

 

[cPWilliamL]

As others have pointed out, you should:

1. Change the SSH port and ensure the new port is open in iptables
2. Setup a wheel user and disable root SSH access
3. Setup SSH keys and disable password authentication

The following documentation should be helpful:
Manage Wheel Group Users - Documentation - cPanel Documentation
Manage root's SSH Keys - Documentation - cPanel Documentation
SSH Password Authorization Tweak - Documentation - cPanel Documentation

It's best to make these changes via console access, that way, if a change you make results in no access, you can easily revert.

 

[Santi109]

To secure SSHD you have to change ssh port as well as disable direct root access.

Did you installed any other firewall on your server ? like csf or apf ?

I think there is not other firewall. it just iptables.. does any port that haven't been used would be okay?

As others have pointed out, you should:

1. Change the SSH port and ensure the new port is open in iptables
2. Setup a wheel user and disable root SSH access
3. Setup SSH keys and disable password authentication

The following documentation should be helpful:
Manage Wheel Group Users - Documentation - cPanel Documentation
Manage root's SSH Keys - Documentation - cPanel Documentation
SSH Password Authorization Tweak - Documentation - cPanel Documentation

It's best to make these changes via console access, that way, if a change you make results in no access, you can easily revert.

Does console access mean IPMI would be suitable? Thank you for the documentation..

 

[cPanelMichael]

Hello,

Any utility that allows you to access the server and run commands outside of the SSH service would be suitable. You may also find this thread helpful for choosing an SSH port and configuration:

[Tutorial] Interested in increasing the security of your server? Read this. (sshd hardening)

Thank you.