topic Re: change ssh port on R80.40 and higher in Firewall and Security Management

change ssh port on R80.40 and higher

Wolfgang — Wed, 11 Aug 2021 06:16:08 GMT

CheckMates,

changing the ssh port via /etc/ssh/sshd_config is broken since R80.40. You can change the port, restart sshd service everything will be fine. But after a reboot the changed entry is removed from sshd_config.

Is there a new clish command available for changing the ssh port or do we have to made the sshd_config readonly after the change ?

Wolfgang

Re: change ssh port on R80.40 and higher

Zolo — Wed, 11 Aug 2021 06:57:50 GMT

Starting from R80.40 Jumbo Hotfix Take 83, instead of editing/backing up /etc/ssh/sshd_config, you should edit/backup /etc/ssh/templates/sshd_config.templ and run /bin/sshd_template_xlate < /config/active

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk99873

Re: change ssh port on R80.40 and higher

dede79 — Wed, 29 May 2024 11:27:40 GMT

SK was deleted and did not survive jumbo install i.e. on R81.10.

Is there actually a workig process to change ssh port permanently?

Re: change ssh port on R80.40 and higher

Arskazv — Wed, 02 Oct 2024 11:29:22 GMT

I also miss a permanent solution for this... In some cases, one may lose connection...

Re: change ssh port on R80.40 and higher

PhoneBoy — Wed, 02 Oct 2024 15:39:36 GMT

Checking the R82 EA, it appears the situation is the same (you need to edit the template file and it may not survive a JHF/upgrade).

Re: change ssh port on R80.40 and higher

Duane_Toler — Wed, 02 Oct 2024 16:16:00 GMT

Do what @PhoneBoy says. You need to write your changes to the template and they will be preserved/re-generated at each startup. I've made a few custom changes myself this way and it works.

Re: change ssh port on R80.40 and higher

Arskazv — Thu, 03 Oct 2024 07:22:31 GMT

Yes, I have been using that, but that template is overwritten by jumbo hotfixes. So it's not permanent in that way 😉