As a follow-up to my previous post about adding sshd
instances on CentOS 5 & 6, here’s a script that does the same on RHEL/CentOS 7.
The script still checks for iptables
and if it is active, will add a rule to accept connections. Why not firewalld
, you ask? Because it’s an abomination and, if you’re using it, you should be ashamed of yourself.
The del
script will prompt you for the sshd
instance name to disable and delete.
You can download the add
script here and the del
script here.
Sample output of add script
[root@ncc1711]# /var/adm/bin/sshd_new_instance_rhel7.sh
Name the new sshd instance: sync
Specify the port for sshd-sync: 22222
sshd-sync is active:
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
sshd-sync 11790 root 3u IPv4 57825801 0t0 TCP *:22222 (LISTEN)
sshd-sync 11790 root 4u IPv6 57825803 0t0 TCP *:22222 (LISTEN)
Sample output of del script
[root@ncc1711]# /var/adm/bin/sshd_del_instance_rhel7.sh
Name the sshd instance to delete: sync
sshd-sync is off
# Generated by iptables-save v1.4.21 on Wed Apr 3 09:35:45 2019
*filter
:INPUT ACCEPT [3798:344109]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [3293:2634398]
COMMIT
# Completed on Wed Apr 3 09:35:45 2019