mirror of
https://github.com/mail-in-a-box/mailinabox.git
synced 2024-11-22 02:17:26 +00:00
open the firewall to an alternative SSH port if set
https://discourse.mailinabox.email/t/opening-up-a-custom-port-for-ssh-after-install/55/2
This commit is contained in:
parent
98651deea4
commit
dd91553689
@ -35,8 +35,22 @@ if [ -z "$DISABLE_FIREWALL" ]; then
|
|||||||
# Various virtualized environments like Docker and some VPSs don't provide
|
# Various virtualized environments like Docker and some VPSs don't provide
|
||||||
# a kernel that supports iptables. To avoid error-like output in these cases,
|
# a kernel that supports iptables. To avoid error-like output in these cases,
|
||||||
# let us disable the firewall.
|
# let us disable the firewall.
|
||||||
|
|
||||||
apt_install ufw
|
apt_install ufw
|
||||||
|
|
||||||
ufw_allow ssh;
|
ufw_allow ssh;
|
||||||
|
|
||||||
|
# ssh might be running on an alternate port. Use sshd -T to dump sshd's
|
||||||
|
# settings, find the port it is supposedly running on, and open that port
|
||||||
|
# too.
|
||||||
|
SSH_PORT=$(sshd -T 2>/dev/null | grep "^port " | sed "s/port //")
|
||||||
|
if [ ! -z "$SSH_PORT" ]; then
|
||||||
|
if [ "$SSH_PORT" != "22" ]; then
|
||||||
|
echo Opening alternate SSH port $SSH_PORT.
|
||||||
|
ufw_allow $SSH_PORT;
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
ufw --force enable;
|
ufw --force enable;
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user