Author |
|
mohamedilyas
Joined: 03 Apr 2024 Posts: 10 Location: India
|
Posted: Tue 08 Oct '24 17:28 Post subject: Able to access through localhost:22 |
|
|
Hi Team,
We have received a new VA where the Apache url is able to access using locahost:22 port from any where by using below command .Kindly help to block the localhost and 22 port in apache level.
echo -e 'GET http://127.0.0.1:22/? HTTP/1.1\r\nHost: myserver.com\r\nUser-Agent: Mozilla\r\n\r\n' | openssl s_client -
connect myserver.com:443 -quiet 2> /dev/null
Please help me with the suggestion. |
|
Back to top |
|
mohamedilyas
Joined: 03 Apr 2024 Posts: 10 Location: India
|
Posted: Wed 09 Oct '24 7:59 Post subject: Re: Able to access through localhost:22 |
|
|
And we are able to access through all other protocols such as sftp.
Kindly help me how to block the protocols in apache. |
|
Back to top |
|
James Blond Moderator
Joined: 19 Jan 2006 Posts: 7364 Location: Germany, Next to Hamburg
|
Posted: Wed 09 Oct '24 10:28 Post subject: |
|
|
Hello.
This is not a problem with Apache itself but with your SSH server. In your example, you see port 443 from the Apache server.
Make sure the Listen parameter is set only to 433 and 80. |
|
Back to top |
|
mohamedilyas
Joined: 03 Apr 2024 Posts: 10 Location: India
|
Posted: Thu 17 Oct '24 7:30 Post subject: |
|
|
James Blond wrote: | Hello.
This is not a problem with Apache itself but with your SSH server. In your example, you see port 443 from the Apache server.
Make sure the Listen parameter is set only to 433 and 80. |
Thanks for response,
We are using "Listen 443" parameter for set only 443 is that ok .
or
we should use any other parameter. |
|
Back to top |
|
Otomatic
Joined: 01 Sep 2011 Posts: 209 Location: Paris, France, EU
|
Posted: Thu 17 Oct '24 11:52 Post subject: |
|
|
Hi,
Don't we also need 'Listen 80'?
At the beginning of the httpd-ssl.conf file, isn't it written :
Code: | # This is the Apache server configuration file providing SSL support.
# When we also provide SSL we have to listen to the
# standard HTTP port and to the HTTPS port |
|
|
Back to top |
|