What you will read?
Changing the default SSH port is a crucial step in enhancing server security. The default port, 22, is often targeted by automated attacks and brute force attempts. By switching to a custom port, you can significantly reduce the likelihood of unauthorized access to your server.
Additionally, this small adjustment helps in identifying genuine access attempts more easily, as attackers typically focus on default configurations. Whether you’re managing a personal server or a corporate environment, this simple step adds an extra layer of protection to your system.
Steps to Change the SSH Port
Access the SSH Configuration File
Log in to your server using SSH with root or a sudo-enabled account. Open the SSH configuration file located at /etc/ssh/sshd_config using a text editor, such as nano or vim:
sudo nano /etc/ssh/sshd_config
Modify the SSH Port Directive
Find the line starting with #Port 22. Uncomment the line by removing the # symbol. Replace 22 with your desired port number, such as 2222:
Port 2222
Save and Exit the Configuration File
After making the changes, save the file and exit the text editor. In nano, this can be done by pressing CTRL+O to save and CTRL+X to exit.
Adjust the Firewall Rules
Add the new SSH port to the firewall to allow traffic. Use the following command to permit the new port:
sudo firewall-cmd --permanent --add-port=2222/tcp
Remove the old SSH port to ensure it is no longer accessible:
