Firewall modifications are not saved / cant close port 22

Support
1

Hardware: VPS bought online
YunoHost version: 1.0.10.2 (stable)
I have access to my server : Through SSH | through the webadmin

Description of my issue

  • I tried to close port 22 in Home/Tools/Firewall on both IPv4 and IPv6.
  • The webinterface asks me for confirmation (Are you sure you want to close port 22 (protocol: TCP, connection: ipv4) which I confirm
  • the switch turns red: indicating the port is now closed.
  • I navigate away from the page
  • When I return to the page the ports are open and the switch indication is green again.

Screenshot 2022-12-12 at 09.36.55
Screenshot 2022-12-12 at 09.36.552386Ă—1776 225 KB

I can also still connect over ssh, so indeed the port is still open.

Using Firefox 107.0.1 on MacOS 13.0.1 (22A400)

2

Yes, I think there’s a specific bit of code to forbid closing port 22, because that can result in catastrophic consequences (loosing entire server access) if not inadvertently … I think the logic was “if you really want to disable SSH access, not forwarding the SSH port on your router should be enough”

1 Like
3

ah, but then maybe also not offering the option in the webinterface might avoid some confusion…
Also, I do not have access to the router in the datacentre where my VPS lives… :wink:

4

Hmyeah clearly I would really advise against disabling port 22 if you’re on a VPS … Like, if for some reasons the webadmin becomes unavailable, this means you’re locked out of your server (unless you have “direct” access through a console from your VPS provider or something)

If your concern is about security, then consider changing the SSH port to some non-default value

1 Like
5

all good, wise and sound advice. Will look into them. Thnx @Aleks!

But please do remove the switch that doesn’t switch :wink:

6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.