Re: [CentOS] OT: closing a port on home router

2015-09-23 Thread Paul Heinlein
On Wed, 23 Sep 2015, James B. Byrne wrote: Moving the port by itself still opens a functioning connection to the internet on a service that is inherently susceptible to brute force and rainbow attacks. The 'dangerous' people on the Internet will find this port in a heartbeat and they are far

Re: [CentOS] OT: closing a port on home router

2015-09-23 Thread James B. Byrne
On Wed, September 23, 2015 00:11, Always Learning wrote: > > > That is great. When I started on Linux that was one of the very > first things I did. Every machine, including servers, has port 22 > replaced by a unique alternative port. Port 22 is also blocked in > IPtables. > > There is an army o

Re: [CentOS] OT: closing a port on home router

2015-09-22 Thread Arun Khan
On Sun, Sep 13, 2015 at 4:46 AM, Fred Smith wrote: > Hi all! > > I'm wanting to close port 22 (ssh) on my home router, and I don't see any > facilities in its GUI for doing that. > man sshd_config; this option is perhaps your solution "ListenAddress." So explicitly mention your LAN port(s). Li

Re: [CentOS] OT: closing a port on home router

2015-09-22 Thread Always Learning
On Tue, 2015-09-22 at 22:52 -0400, Fred Smith wrote: > Paul, thanks for the comment. what you suggest is what my original > post was asking about. > > Now, the externally visible port is not 22. my original post was asking > for advice on tweaking the router to close 22, since I could find no >

Re: [CentOS] OT: closing a port on home router

2015-09-22 Thread Fred Smith
On Wed, Sep 23, 2015 at 03:32:21AM +0100, Always Learning wrote: > > On Tue, 2015-09-22 at 18:52 -0400, Fred Smith wrote: > > > well, not , but another port I won't identify here, and it > > is forwarded to 22 on my linux box. > > Could an 'idea' also be to close permanently port 22 and conf

Re: [CentOS] OT: closing a port on home router

2015-09-22 Thread Always Learning
On Tue, 2015-09-22 at 18:52 -0400, Fred Smith wrote: > well, not , but another port I won't identify here, and it > is forwarded to 22 on my linux box. Could an 'idea' also be to close permanently port 22 and configure SSH to use a completely different port ? Inviting hackers by having a fu

Re: [CentOS] OT: closing a port on home router

2015-09-22 Thread Fred Smith
On Tue, Sep 22, 2015 at 03:09:18PM -0700, John R Pierce wrote: > On 9/22/2015 1:45 PM, Fred Smith wrote: > >Actually, connecting to port 22 works fine, or did until my last hacking > >session on the router. Which is why I wanted to make it inaccessible. > > if you're forwarding WAN port , I do

Re: [CentOS] OT: closing a port on home router

2015-09-22 Thread John R Pierce
On 9/22/2015 1:45 PM, Fred Smith wrote: Actually, connecting to port 22 works fine, or did until my last hacking session on the router. Which is why I wanted to make it inaccessible. if you're forwarding WAN port , I do not understand what your router is doing with port 22, unless the rout

Re: [CentOS] OT: closing a port on home router

2015-09-22 Thread Fred Smith
On Tue, Sep 22, 2015 at 03:11:53PM -0400, Bowie Bailey wrote: > On 9/12/2015 9:44 PM, Fred Smith wrote: > > > >yes, there is port forwarding, of course. I'm forwarding a different > >port to 22 on my desktop, and want to close 22 on the router so it won't > >also allow access to 22 on my desktop. >

Re: [CentOS] OT: closing a port on home router

2015-09-22 Thread Bowie Bailey
On 9/12/2015 9:44 PM, Fred Smith wrote: yes, there is port forwarding, of course. I'm forwarding a different port to 22 on my desktop, and want to close 22 on the router so it won't also allow access to 22 on my desktop. If you have not set up forwarding for port 22 on the router, it is alrea

Re: [CentOS] OT: closing a port on home router

2015-09-12 Thread Fred Smith
On Sat, Sep 12, 2015 at 08:23:14PM -0400, Scott Robbins wrote: > On Sat, Sep 12, 2015 at 04:26:09PM -0700, John R Pierce wrote: > > On 9/12/2015 4:16 PM, Fred Smith wrote: > > > > >I'm wanting to close port 22 (ssh) on my home router, and I don't see any > > >facilities in its GUI for doing that.

Re: [CentOS] OT: closing a port on home router

2015-09-12 Thread Gordon Messmer
On 09/12/2015 04:16 PM, Fred Smith wrote: So, I'm trying this (please tell me if it makes sense to do it this way): I've set up a port forwarding rule on the router that forwards incoming port 22 to port 9 on the LAN side of the router. I'd suggest that you test it, but that does seem reasonabl

Re: [CentOS] OT: closing a port on home router

2015-09-12 Thread Scott Robbins
On Sat, Sep 12, 2015 at 04:26:09PM -0700, John R Pierce wrote: > On 9/12/2015 4:16 PM, Fred Smith wrote: > >I'm wanting to close port 22 (ssh) on my home router, and I don't see any > >facilities in its GUI for doing that. > > inbound ports that aren't forwarded are closed by default on most > a

Re: [CentOS] OT: closing a port on home router

2015-09-12 Thread John R Pierce
On 9/12/2015 4:16 PM, Fred Smith wrote: I'm wanting to close port 22 (ssh) on my home router, and I don't see any facilities in its GUI for doing that. inbound ports that aren't forwarded are closed by default on most any/all NAT routers, unless the router itself is listening to said port.

[CentOS] OT: closing a port on home router

2015-09-12 Thread Fred Smith
Hi all! I'm wanting to close port 22 (ssh) on my home router, and I don't see any facilities in its GUI for doing that. I don't mind learning how to write an iptables rule for that, but I'd rather not have to fool around with commandline stuff on the router, especially things that require extra s