{"id":3429,"date":"2024-07-11T10:00:28","date_gmt":"2024-07-11T10:00:28","guid":{"rendered":"https:\/\/draculaservers.com\/tutorials\/?p=3429"},"modified":"2024-08-04T21:18:47","modified_gmt":"2024-08-04T21:18:47","slug":"run-the-ssh-server-on-a-port-other-than-22-ubuntu-guide","status":"publish","type":"post","link":"https:\/\/draculaservers.com\/tutorials\/run-the-ssh-server-on-a-port-other-than-22-ubuntu-guide\/","title":{"rendered":"Run the SSH Server on a Port Other Than 22 – Ubuntu Guide"},"content":{"rendered":"
\n

SSH (Secure Shell) is a network protocol that allows secure remote login and other network services over an unsecured network. It provides a secure channel over an otherwise insecure network by using encryption. The default port for SSH is port 22. This port is universally recognized and is the standard for SSH communications.<\/p>\n<\/div>\n

\n

Changing the default SSH port can be a useful measure for improving security. Port 22 is well-known and frequently targeted by automated attacks and brute-force attempts. By selecting a less common port number, you can reduce the number of automated attacks and potential unauthorized access attempts, adding an additional layer of obscurity to your system.<\/p>\n\n<\/div>\n

\n

This guide will demonstrate how you can easily change the default SSH port to a port other than 22.<\/p>\n<\/div>\n

\n

Benefits of Changing the SSH Port<\/h2>\n<\/div>\n
\n

While changing the SSH port alone does not provide robust security, it can act as a deterrent against automated attacks. Using a non-standard port makes it less likely that automated scripts and bots will target your server, as they often scan for default ports like 22.<\/p>\n<\/div>\n

\n

Automated scanning tools typically look for services running on standard ports. By moving SSH to a different port, you can minimize the number of these automated attacks. This doesn\u2019t replace the need for strong passwords and key-based authentication but can reduce the volume of attack attempts your server receives.<\/p>\n<\/div>\n

\n

Step 1: Install SSH Server (If Not Already Installed)<\/h3>\n<\/div>\n
\n

Check for SSH Installation<\/strong><\/p>\n<\/div>\n

\n

To verify if the SSH server is already installed on your Ubuntu system, you can use the following command to check the status of the SSH service:<\/p>\n<\/div>\n

\n
sudo<\/span> systemctl status ssh<\/span>\r\n<\/code><\/pre>\n<\/div>\n
\n
If the SSH server is installed, you will see an output indicating that the service is active (running) or inactive. If the service is not found, it means that SSH is not installed.<\/p>\n<\/div>\n
\n
Install OpenSSH Server<\/strong><\/p>\n<\/div>\n
\n
If SSH is not installed, you can easily install it using the package manager. Run the following commands to update your package list and install the OpenSSH server:<\/p>\n<\/div>\n
\n
sudo<\/span> apt update &&<\/span> sudo<\/span> apt install<\/span> openssh-server\r\n<\/code><\/pre>\n<\/div>\n
\n
This command will first update your package repository to ensure you have the latest package information, and then it will install the\u00a0openssh-server<\/code> package, which includes the SSH server.<\/p>\n<\/div>\n
\n
Step 2: Choose a New Port Number<\/h3>\n<\/div>\n
\n
Selecting an Alternative Port<\/strong><\/p>\n<\/div>\n
\n
When selecting a new port number for your SSH server, consider choosing a port within the range of 1024 to 49151. This range is reserved for user-defined applications and is less likely to conflict with well-known ports used by other services.<\/p>\n<\/div>\n
\n
Recommendations:<\/strong><\/p>\n<\/div>\n
\n
    \n
  1. Choose a Port Between 1024 and 49151:<\/strong>\u00a0Avoid using ports below 1024, as these are known as well-known ports and are commonly used by other system services.<\/li>\n
  2. Avoid Ports in Use by Other Services:<\/strong>\u00a0Ensure that the port you select is not already in use by other services on your system. You can check for open ports using the\u00a0netstat<\/code>\u00a0or\u00a0ss<\/code>\u00a0command:\n
    sudo<\/span> netstat<\/span> -tuln\r\n<\/code><\/pre>\n
    or<\/p>\n
    sudo<\/span> ss -tuln\r\n<\/code><\/pre>\n
    Look through the list to ensure the port you choose is not listed as being in use.<\/li>\n<\/ol>\n<\/div>\n
    \n
    By following these steps, you will ensure that your SSH server runs on a non-standard port, helping to enhance security and reduce the likelihood of automated attacks.<\/p>\n<\/div>\n
    \n
    Step 3: Configure SSH to Use the New Port<\/h3>\n<\/div>\n
    \n
    Edit the SSH Configuration File<\/strong><\/p>\n<\/div>\n
    \n
    To change the SSH port, you need to edit the SSH server configuration file, which is typically located at\u00a0\/etc\/ssh\/sshd_config<\/code>. Open this file in your preferred text editor. Here, we use\u00a0nano<\/code>\u00a0for simplicity:<\/p>\n<\/div>\n
    \n
    sudo<\/span> nano<\/span> \/etc\/ssh\/sshd_config\r\n<\/code><\/pre>\n<\/div>\n
    \n
    Modify the Port Setting<\/strong><\/p>\n<\/div>\n
    \n
    In the configuration file, look for the line that specifies the port number. It will look like this:<\/p>\n<\/div>\n
    \n
    #Port 22\r\n<\/code><\/pre>\n<\/div>\n
    \n
    Uncomment this line by removing the\u00a0#<\/code>\u00a0at the beginning, and change\u00a022<\/code>\u00a0to your desired port number. For example, to use port\u00a02222<\/code>, modify the line as follows:<\/p>\n<\/div>\n
    \n
    Port 2222\r\n<\/code><\/pre>\n<\/div>\n
    \n
    Save the file and exit the text editor. In\u00a0nano<\/code>, you can do this by pressing\u00a0Ctrl+X<\/code>, then\u00a0Y<\/code>\u00a0to confirm the changes, and\u00a0Enter<\/code>\u00a0to save.<\/p>\n<\/div>\n
    \n
    Step 4: Adjust Firewall Settings<\/h3>\n<\/div>\n
    \n
    Allow the New SSH Port Through the Firewall<\/strong><\/p>\n<\/div>\n
    \n
    If you have a firewall enabled on your Ubuntu system, you need to configure it to allow traffic on the new SSH port. Ubuntu uses\u00a0ufw<\/code>\u00a0(Uncomplicated Firewall) by default, which makes it easy to manage firewall rules.<\/p>\n<\/div>\n
    \n
    To allow traffic on the new SSH port, use the following command, replacing\u00a02222<\/code>\u00a0with the port number you chose:<\/p>\n<\/div>\n
    \n
    sudo<\/span> ufw allow 2222\/tcp\r\n<\/code><\/pre>\n<\/div>\n
    \n
    Verify the Firewall Rule<\/strong><\/p>\n<\/div>\n
    \n
    To ensure that the new rule has been added correctly, you can list the current firewall rules with the following command:<\/p>\n<\/div>\n
    \n
    sudo<\/span> ufw status\r\n<\/code><\/pre>\n<\/div>\n
    \n
    This command will display a list of allowed services and ports, including your newly added SSH port. Ensure that you see an entry similar to:<\/p>\n<\/div>\n
    \n
    2222\/tcp                   ALLOW       Anywhere\r\n2222\/tcp (v6)              ALLOW       Anywhere (v6)\r\n<\/code><\/pre>\n<\/div>\n
    \n
    With these steps, you\u2019ve successfully configured your firewall to allow SSH connections on your chosen port, enhancing the security of your SSH service.<\/p>\n<\/div>\n
    \n
    Step 5: Restart the SSH Service<\/h3>\n<\/div>\n
    \n
    Restart SSH to Apply Changes<\/strong><\/p>\n<\/div>\n
    \n
    After updating the configuration file and adjusting the firewall, you need to restart the SSH service to apply the changes. Use the following command to restart the SSH daemon:<\/p>\n<\/div>\n
    \n
    sudo<\/span> systemctl restart ssh<\/span>\r\n<\/code><\/pre>\n<\/div>\n
    \n
    Verify SSH Service Status<\/strong><\/p>\n<\/div>\n
    \n
    Ensure that the SSH service is running correctly after the restart by checking its status:<\/p>\n<\/div>\n
    \n
    sudo<\/span> systemctl status ssh<\/span>\r\n<\/code><\/pre>\n<\/div>\n
    \n
    You should see an output indicating that the SSH service is active and running. If there are any errors, they will be displayed here, which can help in troubleshooting.<\/p>\n<\/div>\n
    \n
    Step 6: Update SSH Client Configuration<\/h3>\n<\/div>\n
    \n
    Connect to the SSH Server on the New Port<\/strong><\/p>\n<\/div>\n
    \n
    Now that the SSH server is configured to listen on the new port, you need to specify this port when connecting from an SSH client. You can do this by using the\u00a0-p<\/code>\u00a0option followed by the port number. For example, if your new port is\u00a02222<\/code>, use the following command:<\/p>\n<\/div>\n
    \n
    ssh<\/span> -p 2222 username@hostname\r\n<\/code><\/pre>\n<\/div>\n
    \n
    Replace\u00a0username<\/code>\u00a0with your SSH username and\u00a0hostname<\/code>\u00a0with the IP address or domain name of your SSH server.<\/p>\n<\/div>\n
    \n
    Update SSH Client Configuration (Optional)<\/strong><\/p>\n<\/div>\n
    \n
    For convenience, you can add the new port configuration to your SSH client settings, so you don\u2019t have to specify the port number each time you connect. Edit the\u00a0~\/.ssh\/config<\/code>\u00a0file (create it if it doesn\u2019t exist) and add an entry like this:<\/p>\n<\/div>\n
    \n
    Host myserver\r\n    HostName hostname\r\n    User username\r\n    Port 2222\r\n<\/code><\/pre>\n<\/div>\n
    \n
    Replace\u00a0myserver<\/code>\u00a0with a name you want to use for this connection,\u00a0hostname<\/code>\u00a0with your server\u2019s address,\u00a0username<\/code>\u00a0with your SSH username, and\u00a02222<\/code>\u00a0with your new SSH port. Save the file and you can now connect using a simplified command:<\/p>\n<\/div>\n
    \n
    ssh<\/span> myserver\r\n<\/code><\/pre>\n<\/div>\n
    \n
    With these steps, you\u2019ve successfully configured your SSH client to connect to your server on the new port, making your remote management process more secure and streamlined.<\/p>\n
    \n
    Affordable VPS Hosting With Dracula Servers<\/span><\/h2>\n<\/div>\n
    \n
    Looking for reliable and budget-friendly Virtual Private Server (VPS) hosting? Look no further than\u00a0Dracula Servers<\/a>. Dracula Servers offers a range of VPS hosting plans tailored to meet diverse needs. With competitive pricing, robust performance, and a user-friendly interface, it\u2019s an excellent choice for individuals and businesses alike.<\/p>\n<\/div>\n
    \n
    Explore the\u00a0Dracula Servers website<\/a> to discover hosting solutions that align with your requirements and take your online presence to new heights with their affordable and efficient VPS hosting services.<\/p>\n<\/div>\n
    \n
    Visit Dracula Servers<\/strong><\/a>\u00a0and experience reliable VPS hosting without breaking the bank.<\/p>\n<\/div>\n<\/div>\n
    \n
    Troubleshooting<\/h3>\n<\/div>\n
    \n
    Common Issues and Solutions<\/strong><\/p>\n<\/div>\n
    \n
    When changing the SSH port, you may encounter several common issues. Here are some potential problems and solutions:<\/p>\n<\/div>\n
    \n
      \n
    1. SSH Connection Failures<\/strong>\n