{"id":256,"date":"2016-06-05T08:41:35","date_gmt":"2016-06-04T23:41:35","guid":{"rendered":"https:\/\/www.dogrow.net\/linux\/?p=256"},"modified":"2020-10-08T21:31:25","modified_gmt":"2020-10-08T12:31:25","slug":"blog34","status":"publish","type":"post","link":"https:\/\/www.dogrow.net\/linux\/blog34\/","title":{"rendered":"(34) SSH\u306e\u30dd\u30fc\u30c8\u756a\u53f7\u3092\u5909\u66f4"},"content":{"rendered":"<h1 class=\"my_h\">1. CentOS 7\u306e\u5834\u5408<\/h1>\n<h3 class=\"my_h\">(1) SSH Daemon\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6\u3059\u308b\u3002<\/h3>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]# vi \/etc\/ssh\/sshd_config\r\n<\/pre>\n<p>\u3053\u3053\u3067\u306f SSH\u30b5\u30fc\u30d0\u30fc\u5074\u306e\u30b3\u30cd\u30af\u30b7\u30e7\u30f3\u7528\u306e\u30dd\u30fc\u30c8\u3092 12345\u3068\u3059\u308b\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\n#Port 22\r\nPort 12345\r\n<\/pre>\n<p>\u3064\u3044\u3067\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u306e\u305f\u3081\u306b Root\u3067\u306e\u30ed\u30b0\u30a4\u30f3\u3092\u7981\u6b62\u3057\u3066\u304a\u304f\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\nPermitRootLogin no\r\n<\/pre>\n<h3 class=\"my_h\">(2) sshd\u3092\u518d\u8d77\u52d5\u3059\u308b\u3002<\/h3>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]# systemctl restart sshd.service\r\n[user@ ~]# systemctl status sshd.service\r\n<\/pre>\n<h3 class=\"my_h\">(3) firewall\u306b\u7a74\u3092\u7a7a\u3051\u308b\u3002<\/h3>\n<p>firewall\u3067SSH\u30dd\u30fc\u30c8\u756a\u53f7\u304c22\u756a\u306e\u307e\u307e\u3060\u3068\u3001\u5f53\u7136\u3060\u304c\u63a5\u7d9a\u3067\u304d\u306a\u3044\u3002<br \/>\nfirewall\u306e\u8a2d\u5b9a\u3082\u5909\u66f4\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<p>\u73fe\u5728\u5229\u7528\u53ef\u80fd\u306a\u30b5\u30fc\u30d3\u30b9\u3001\u30dd\u30fc\u30c8\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]# firewall-cmd --list-services\r\n[user@ ~]# firewall-cmd --list-ports\r\n<\/pre>\n<p>\u65b0\u30dd\u30fc\u30c8\u306f\u30de\u30b7\u30f3\u518d\u8d77\u52d5\u5f8c\u3082\u958b\u3051\u305f\u307e\u307e\u306b\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]# firewall-cmd --permanent --add-port=12345\/tcp\r\n<\/pre>\n<p>\u524d\u30dd\u30fc\u30c8\u306f\u30de\u30b7\u30f3\u518d\u8d77\u52d5\u5f8c\u3082\u9589\u3058\u305f\u307e\u307e\u306b\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]# firewall-cmd --permanent --remove-service=ssh\r\n<\/pre>\n<p>HTTPS\u3082\u958b\u3051\u3066\u304a\u304f\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]# firewall-cmd --permanent --zone=public --add-service=https\r\n<\/pre>\n<p>firewall\u8a2d\u5b9a\u3092\u30ea\u30ed\u30fc\u30c9\u3059\u308b\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]# firewall-cmd --reload\r\n<\/pre>\n<h1 class=\"my_h\">2. Ubuntu 18\u306e\u5834\u5408<\/h1>\n<h3 class=\"my_h\">(1) SSH Daemon\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6\u3059\u308b\u3002<\/h3>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]$ sudo vi \/etc\/ssh\/sshd_config\r\n<\/pre>\n<p>\u3053\u3053\u3067\u306f SSH\u30b5\u30fc\u30d0\u30fc\u5074\u306e\u30b3\u30cd\u30af\u30b7\u30e7\u30f3\u7528\u306e\u30dd\u30fc\u30c8\u3092 12345\u3068\u3059\u308b\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\n#Port 22\r\nPort 12345\r\n<\/pre>\n<p>\u3064\u3044\u3067\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u306e\u305f\u3081\u306b Root\u3067\u306e\u30ed\u30b0\u30a4\u30f3\u3092\u7981\u6b62\u3057\u3066\u304a\u304f\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\nPermitRootLogin no\r\n<\/pre>\n<h3 class=\"my_h\">(2) sshd\u3092\u518d\u8d77\u52d5\u3059\u308b\u3002<\/h3>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]$ sudo service sshd restart\r\n[user@ ~]$ sudo service sshd status\r\n<\/pre>\n<h3 class=\"my_h\">(3) firewall\u306b\u7a74\u3092\u7a7a\u3051\u308b\u3002<\/h3>\n<p>firewall\u3067SSH\u30dd\u30fc\u30c8\u756a\u53f7\u304c22\u756a\u306e\u307e\u307e\u3060\u3068\u3001\u5f53\u7136\u3060\u304c\u63a5\u7d9a\u3067\u304d\u306a\u3044\u3002<br \/>\nfirewall\u306e\u8a2d\u5b9a\u3082\u5909\u66f4\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<p>\u73fe\u5728\u5229\u7528\u53ef\u80fd\u306a\u30b5\u30fc\u30d3\u30b9\u3001\u30dd\u30fc\u30c8\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]$ sudo ufw status\r\nTo                         Action      From\r\n--                         ------      ----\r\n22\/tcp                     ALLOW       Anywhere\r\n80\/tcp                     ALLOW       Anywhere\r\n21\/tcp                     ALLOW       Anywhere\r\n5901\/tcp                   ALLOW       Anywhere\r\n<\/pre>\n<p>\u65b0\u30dd\u30fc\u30c8\u3092\u7a7a\u3051\u308b\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]$ sudo ufw allow 12345\/tcp\r\n<\/pre>\n<p>\u524d\u30dd\u30fc\u30c8\u3092\u9589\u3058\u308b\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]$ sudo ufw delete allow 22\/tcp\r\n<\/pre>\n<p>firewall\u8a2d\u5b9a\u3092\u30ea\u30ed\u30fc\u30c9\u3059\u308b\u3002<\/p>\n<pre class=\"my_pre_bgBlack\">\r\n[user@ ~]$ sudo ufw reload\r\n<\/pre>\n<hr class=\"my_hr_bottom\">\n","protected":false},"excerpt":{"rendered":"<p>1. CentOS 7\u306e\u5834\u5408 (1) SSH Daemon\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6\u3059\u308b\u3002 [user@ ~]# vi \/etc\/ssh\/sshd_config \u3053\u3053\u3067\u306f SSH\u30b5\u30fc\u30d0\u30fc\u5074\u306e\u30b3\u30cd\u30af\u30b7\u30e7\u30f3\u7528\u306e\u30dd\u30fc\u30c8\u3092 12345\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.dogrow.net\/linux\/blog34\/\">\u7d9a\u304d\u3092\u8aad\u3080 &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[59,58],"tags":[],"class_list":["post-256","post","type-post","status-publish","format-standard","hentry","category-firewall-cmd","category-ssh"],"views":2461,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.dogrow.net\/linux\/wp-json\/wp\/v2\/posts\/256","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dogrow.net\/linux\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dogrow.net\/linux\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dogrow.net\/linux\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dogrow.net\/linux\/wp-json\/wp\/v2\/comments?post=256"}],"version-history":[{"count":23,"href":"https:\/\/www.dogrow.net\/linux\/wp-json\/wp\/v2\/posts\/256\/revisions"}],"predecessor-version":[{"id":2656,"href":"https:\/\/www.dogrow.net\/linux\/wp-json\/wp\/v2\/posts\/256\/revisions\/2656"}],"wp:attachment":[{"href":"https:\/\/www.dogrow.net\/linux\/wp-json\/wp\/v2\/media?parent=256"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dogrow.net\/linux\/wp-json\/wp\/v2\/categories?post=256"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dogrow.net\/linux\/wp-json\/wp\/v2\/tags?post=256"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}