centos 7.0 修改ssh預設串連22連接埠 和 添加防火牆firewalld 通過連接埠

標籤：

 

首先 先做的就是 修改ssh的預設連接埠22

需要修改檔案

/etc/ssh/sshd_config

使用命令

vi /etc/ssh/sshd_config

[[email protected] ~]# vi /etc/ssh/sshd_config#       $OpenBSD: sshd_config,v 1.90 2013/05/16 04:09:14 dtucker Exp $# This is the sshd server system-wide configuration file.  See# sshd_config(5) for more information.# This sshd was compiled with PATH=/usr/local/bin:/usr/bin# The strategy used for options in the default sshd_config shipped with# OpenSSH is to specify options with their default value where# possible, but leave them commented.  Uncommented options override the# default value.# If you want to change the port on a SELinux system, you have to tell# SELinux about this change.# semanage port -a -t ssh_port_t -p tcp #PORTNUMBER#Port 48489#AddressFamily any#ListenAddress 0.0.0.0#ListenAddress ::# The default requires explicit activation of protocol 1#Protocol 2# HostKey for protocol version 1#HostKey /etc/ssh/ssh_host_key# HostKeys for protocol version 2HostKey /etc/ssh/ssh_host_rsa_key#HostKey /etc/ssh/ssh_host_dsa_keyHostKey /etc/ssh/ssh_host_ecdsa_key# Lifetime and size of ephemeral version 1 server key#KeyRegenerationInterval 1h#ServerKeyBits 1024# Ciphers and keying#RekeyLimit default none# Logging# obsoletes QuietMode and FascistLogging#SyslogFacility AUTHSyslogFacility AUTHPRIV#LogLevel INFO# Authentication:#LoginGraceTime 2m#PermitRootLogin yes#StrictModes yes#MaxAuthTries 6#MaxSessions 10#RSAAuthentication yes#PubkeyAuthentication yes# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2# but this is overridden so installations will only check .ssh/authorized_keysAuthorizedKeysFile      .ssh/authorized_keys#AuthorizedPrincipalsFile none#AuthorizedKeysCommand none

　　先做就完成了 連接埠的修改 然後就需要讓防火牆通過這個連接埠

centos 7 預設使用的 是 firewalld  所以先看看是否運行

firewall-cmd --state

然後看下 先做預設通過的連接埠都有哪些

查看連接埠 規則

firewall-cmd --permanent --list-port

剛才測試 添加了 連接埠 現在刪除這個連接埠 參數--permanent 是永久配置 機子重啟依然有效

刪除連接埠

firewall-cmd --permanent --remove-port=48489/tcp

添加連接埠 到防火牆例外

firewall-cmd --permanent --zone=public --add-port=48489/tcp

 

然後通過putty ssh串連軟體連結一下就好了~

firewalld 參考資料

http://blog.csdn.net/smstong/article/details/39317277

 

centos 7.0 修改ssh預設串連22連接埠 和 添加防火牆firewalld 通過連接埠