LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 02-13-2007, 03:22 PM   #1
ille.pugil42
Member
 
Registered: Dec 2005
Distribution: Slackware
Posts: 151

Rep: Reputation: 30
SSH and the changing ports it uses


Hi, I think I've figured this out, I'd just like some backup or affirmation here. (And yes, I did a search, just didn't find anything. That may have been because I didn't know the key words to look for). My /var/log/secure file has been showing ssh sessions at various times of the day, that in itself isn't that disconcerting since we've got more than 1 person that has to access it. The part that was kind of worrying was the fact that the port it was using was different each time. I think what is happening is that SSH is just either forwarding or using a different port for each connection. Is that the case? In testing that theory, I watched the log file (tail -f /var/log/secure) and proceeeded to log in via ssh 3 different times. The ports it used were 62274, 62275, 62276.

If anyone can affirm this as normal, that'd be great!
 
Old 02-13-2007, 03:50 PM   #2
ilikejam
Senior Member
 
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96
Hi.

Does the log look like:
Code:
Feb 11 21:20:01 cronus sshd[5030]: Accepted password for username from xxx.xxx.xxx.xxx port 1911 ssh2
?

If so, it's normal. The port referred to (1911 in this case) is the remote side's port, which will be random, and outside the privileged port range.

Dave
 
Old 02-13-2007, 05:22 PM   #3
ille.pugil42
Member
 
Registered: Dec 2005
Distribution: Slackware
Posts: 151

Original Poster
Rep: Reputation: 30
Yes, exactly! Thanks for affirming my theory.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
ssh on two ports mazzo Linux - Security 8 09-25-2004 10:05 PM
SSH and ports zowey Linux - Networking 4 07-19-2004 06:31 AM
changing ports on dyndns.org Zaius Linux - Newbie 2 01-15-2004 02:14 PM
ssh ports phishintrip Linux - Networking 2 07-02-2003 02:43 PM
Changing default ports for smoothwall lhiggins Linux - Newbie 9 04-24-2003 12:12 PM


All times are GMT -5. The time now is 05:18 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration