/etc/ssh/sshd_configNote: Upon updating SSH ports, be sure to add the port number to the firewall; otherwise, users will be locked out of the server.
Change Specific Parameters within sshd_config
To change specific parameters within sshd_config:
- Log into your server as the root user.
- Uncomment the desired line by removing the number-sign (#) and changing the value for the line.
For example, the default SSH port appears in a line like this:
#Port 22To change the SSH port to 456, you will need to make the line appear like this:
Port 456
Update IPTables and Firewall
Note: Any changes made via GUI/TUI firewall will also change your server's iptables and may overwrite any manual changes made directly to the iptables file itself. This external link is to a discussion of the interactions between firewall programs and iptables (and will open in a new tab).After you are finished configuring SSH, you will need to add the port to iptables as well as your installed firewall.
To update iptables, please enter the following in SSH:
iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 456 -j ACCEPTWhen using the command above, be sure to substitute 456 with the actual port number you are adding.
Reset SSH Daemon
After making the necessary changes to iptables and your computer's firewall, you will need to restart the SSH daemon. You can do so by issuing the following command:
/etc/init.d/sshd restartLog out of your server and log in again using the proper user, IP address and port number you specified in sshd_config.
