ClearFoundation Tracker - ClearOS
View Issue Details
0009051ClearOSapp-ssh-server - SSH Serverpublic2016-06-03 09:072016-12-16 14:04
dloper 
user2 
lowfeaturealways
closedfixed 
7.2.0 
7.3.0 Beta 17.3.0 Beta 1 
0009051: App doesn't block ssh when using non-standard port
Fail2ban is unaware of port changes made in app-ssh-server. When configuring fail2ban or when configuring app-ssh-server, these two should be marginally aware of each other.

If the port was changed to 222 then changes could be made to:

port = 222

in jail.d/clearos-sshd.conf
and jail.d/clearos-sshd-ddos.conf

Alternately, you can block all traffic based on the hit using:

banaction = iptables-allports

in /etc/fail2ban/jail.conf
No tags attached.
Issue History
2016-06-03 09:07dloperNew Issue
2016-06-13 08:23user2Statusnew => confirmed
2016-11-16 09:12user2Target Version7.3.0 Beta 1 => 7.3.0 Beta 1
2016-12-09 14:01user2Categoryapp-attack-detector - Attack Detector => app-ssh-server - SSH Server
2016-12-09 14:01user2Statusconfirmed => resolved
2016-12-09 14:01user2Fixed in Version => 7.3.0 Beta 1
2016-12-09 14:01user2Resolutionopen => fixed
2016-12-09 14:01user2Assigned To => user2
2016-12-16 14:04user2Statusresolved => closed

There are no notes attached to this issue.