As I sysadmin, I'm tired of seeing hundreds of bruteforce attacks over port 21, so I decided to change the FTP port to another value. But a great value would be added if you allow to change this value thru de FTP configuration screen.
Actually, I have to do the followin on any new server to setup:
- echo "Bind: [DESIREDPORT#]" >> /var/cpanel/conf/pureftpd/main;
- /usr/local/cpanel/scripts/setupftpserver pure-ftpd --force;
Any possibility to simplify this and to make the switch cleaner, the better.
You can change SSH port, cPanel won't touch this file. I have several cPanel servers with different SSH port. But don't forget to edit iptables or firewalld rules, or at least, have a KVM access (console) to the server, if any error.
I receive, every week, lots of scans in FTP port. Ok about cpHulk but a different port will help to protect and use less resources.
Change the default cPanel and WHM ports would be good too...
You can change SSH port, cPanel won't touch this file. I have several cPanel servers with different SSH port. But don't forget to edit iptables or firewalld rules, or at least, have a KVM access (console) to the server, if any error.
I receive, every week, lots of scans in FTP port. Ok about cpHulk but a different port will help to protect and use less resources.
Change the default cPanel and WHM ports would be good too...
If you change the ftp config from console, you need to follow this guide:
https://documentation.cpanel.net/display/CKB/How+to+Edit+FTP+Server+Configuration+from+the+Command+Line
The sshd_config file isnt touched by cpanel after upgrades, you dont need to worry about lose your custom config.
If you change the ftp config from console, you need to follow this guide:
https://documentation.cpanel.net/display/CKB/How+to+Edit+FTP+Server+Configuration+from+the+Command+Line
The sshd_config file isnt touched by cpanel after upgrades, you dont need to worry about lose your custom config.
Replies have been locked on this page!