[SERVICE] - Please let sshd also listen at port 443

Have an idea that will make Phoenix even better? Post it here!

[SERVICE] - Please let sshd also listen at port 443

Postby hafner on Mon Mar 13, 2006 1:21 pm

[SERVICE] - Please let sshd also listen at port 443 (unless used otherwise e.g. for https).

Reason: often firewalls do not support connections to port 22. But typically a HTTPS capable HTTP proxies support the HTTP CONNECT method, if the destination port is 443 (that's for HTTPS usually). Appropriate client programs can use that to connect to the SSH daemon (e.g. PuTTY).

Regards
Thomas
hafner
Contributer
Contributer
 
Posts: 73
Joined: Tue Mar 07, 2006 2:18 pm
Location: München (Germany)

Postby Rommaster on Mon Mar 13, 2006 3:23 pm

You can also use ftp, directadmin etc.
There's no need to add extra ports.

Rolling Eyes
SwiftIRC - irc.swiftirc.net - #phoenix
Phoenix-Network

(\__/)
(='.'=) This is Bunny. Copy and paste bunny into your
(" )_(" ) signature to help him gain world domination.
Rommaster
Phoenix Veteran
Phoenix Veteran
 
Posts: 960
Joined: Thu Mar 10, 2005 1:05 pm
Location: The Netherlands

Postby hafner on Mon Mar 13, 2006 5:28 pm

Rommaster wrote:You can also use ftp, directadmin etc.
There's no need to add extra ports.
Rolling Eyes
Connecting via ssh offers a real shell, e.g. bash or tcsh: a fully operational CLI (command line interface).
FTP and directadmin don't provide that, sorry.

Of course there's no urgent need to let sshd listen also on port 443. On the other side the subtitle of this bulletin board is
"Have an idea that will make Phoenix even better? Post it here!"
therefore I've posted it Smile

And as far as there's no other service planned on port 443, it's very easy. Just the following lines had to be added into sshd_config:
Code: Select all
Port 22
Port 443
In addition I don't see any impact on resources or performance. If I'm wrong, please tell me.

BTW, here's what the SSH FAQ says about this topic:
http://www.onsight.com/faq/ssh/ssh-faq-5.html#ss5.2

Regards
Thomas
hafner
Contributer
Contributer
 
Posts: 73
Joined: Tue Mar 07, 2006 2:18 pm
Location: München (Germany)

Postby thebeast on Fri Mar 24, 2006 8:46 pm

What insane firewall must be to block 22 port? Even my network admin is mad one but he opened for me that port becouse everyone now knows how much means port 22. So if you have your own firewall in home i think you can fix that problem or just try to contact your ISP about that and say that they are morons if they blocking 22 port. Your ISP admins using that port even :-)
Sarunas B.
Phoenix Network Still Alive!
(\__/)
(='.'=) This is Bunny. Copy and paste bunny into your
(" )_(" ) signature to help him gain world domination.
thebeast
Phoenix Veteran
Phoenix Veteran
 
Posts: 646
Joined: Wed Mar 23, 2005 1:20 pm
Location: Lithuania

Postby Tim on Sat Mar 25, 2006 12:43 am

We have HTTPS.
User avatar
Tim
root
root
 
Posts: 736
Joined: Thu Mar 10, 2005 6:31 am
Location: Australia

Postby hafner on Wed Mar 29, 2006 10:21 am

thebeast wrote:What insane firewall must be to block 22 port?

Many companies configure there firewall to block port 22 because they think their employees don't need anything of the INTERNET but http/https.

Thomas
hafner
Contributer
Contributer
 
Posts: 73
Joined: Tue Mar 07, 2006 2:18 pm
Location: München (Germany)

Postby hafner on Wed Mar 29, 2006 10:24 am

Tim wrote:We have HTTPS.

On every machine? Then sshd cannot listen on port 443, of course. Maybe one day, when a new machine is be added, port 443 of that machine can be dedicated to sshd rather than to https?

Thomas
hafner
Contributer
Contributer
 
Posts: 73
Joined: Tue Mar 07, 2006 2:18 pm
Location: München (Germany)

Postby thanjee on Fri Mar 31, 2006 11:31 am

there is only one machine (isn't there?) infinity. My suggestion is, if you have a problem with port 22, try and resolve it at your end.

My uni started to block all ports (except http/https) which was really annoying - way too many people complained - so they changed it. Now you just log into the firewall and you can use whatever port you like, and they just log your activity.
thanjee
Contributer
Contributer
 
Posts: 65
Joined: Sat Feb 25, 2006 3:51 am

Postby Guest on Tue Apr 04, 2006 8:55 am

thanjee wrote:there is only one machine (isn't there?) infinity.
But http://wiki.phoenix-hosting.org/index.php/SSH_versus_Telnet says:
Phoenix Network uses SSH on all of its servers, for obvious security reasons discussed here.
"on all of its servers" made me believe there's more than just infinity. Shall I correct the wiki wiki article there?

Regards
Thomas
Guest
 

Postby hafner on Tue Apr 04, 2006 9:04 am

Anonymous wrote:[Posted: Tue Apr 04, 2006 9:55 am] ...
Oops, what happened? That was me. Didn't want to post anonymously, sorry. Seems that automatic login failed. Didn't even know that anonymous postings are possible.

Thomas
hafner
Contributer
Contributer
 
Posts: 73
Joined: Tue Mar 07, 2006 2:18 pm
Location: München (Germany)

Postby Tim on Tue Apr 04, 2006 9:24 am

Anonymous wrote:"on all of its servers" made me believe there's more than just infinity.

I'd have a look at the last modified date on that article. It is almost certain it was written when we had 3 shitty servers compared to one good one.

That wiki isn't maintained.
User avatar
Tim
root
root
 
Posts: 736
Joined: Thu Mar 10, 2005 6:31 am
Location: Australia


Return to Suggestions

Who is online

Users browsing this forum: No registered users and 1 guest

cron