[svlug] Picking an alternate port for sshd to listen to

[Don Marti]

begin  Norman Shapiro quotation of Thu, Oct 28, 2004 at 10:46:07AM -0700:

> He said that the port should be selected "with care".  I don't know what kind of
> care I should take.  Is there some acceptable range of port numbers?  Are there
> certain port numbers that should be avoided?

Look at your firewall logs and avoid ports that get
a lot of attention from wannabe attackers probing
for services.  You don't want to move ssh to port
137 or something.

Look at /etc/services and make sure you don't conflict
with a real service you offer or plan to offer.

Look at the services file that comes with nmap and
don't choose a port that nmap scans by default.

-- 
Don Marti
http://zgp.org/~dmarti/
dmarti at zgp.org                       Keep your mangement off my digital rights.