YunoHost/doc
1
0
Fork 0
mirror of https://github.com/YunoHost/doc.git synced 2024-09-03 20:06:26 +02:00
Code Issues Projects Releases Packages Wiki Activity

[fix] Add missing firewall rule

Browse source
This commit is contained in:
ljf (zamentur) 2018-06-11 15:35:22 +02:00 • committed by GitHub
parent 665a1a395a
commit 32bf9d5ffa
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
security.md
View file

@ -61,6 +61,11 @@ nano /etc/ssh/sshd_config
Port 22 # to replace by 9777 for example Port 22 # to replace by 9777 for example
``` ```
**Open the port** in firewall (you can use -6 option to limit forbid ipv4 connexion)
```bash
yunohost firewall allow TCP 9777
```
Save and restart SSH daemon. Switch over to the new port by restarting SSH. Save and restart SSH daemon. Switch over to the new port by restarting SSH.
```bash ```bash
/etc/init.d/ssh restart /etc/init.d/ssh restart
@ -70,7 +75,6 @@ Then restart the iptables firewall and close the old port in iptables.
```bash ```bash
yunohost firewall reload yunohost firewall reload
yunohost firewall disallow <your_old_ssh_port_number> # port by default 22 yunohost firewall disallow <your_old_ssh_port_number> # port by default 22
yunohost firewall disallow --ipv6 TCP <your_new_ssh_port_number> # for ipv6
``` ```
**For the next SSH connections ** you need to add the `-p` option followed by the SSH port number. **For the next SSH connections ** you need to add the `-p` option followed by the SSH port number.