Hello guys
We have install new OpenVPN Access Server, last release.
How to:
- disable ping so main IP not respond?
- disable ssh access?
For both we can work from hypervisor
Thanks
Disable ssh and ping
- openvpn_inc
- OpenVPN Inc.
- Posts: 1333
- Joined: Tue Feb 16, 2021 10:41 am
Re: Disable ssh and ping
Hello webstyler,
SSH can be turned off by using system management in the operating system. Disabling ping response is something that can be done with iptables rules. Both things are something that are pretty easy to find instructions about online. Here's some examples;
To turn off SSH service entirely:
systemctl stop --now ssh
systemctl disable --now ssh
And stop responding to ICMP:
nano /etc/sysctl.conf
Add this line:
net.ipv4.icmp_echo_ignore_al = 1
Save and exit from nano, then run:
sysctl -p
Note that you must be root for these commands to work, or else prepend it with sudo, as per normal procedure on Linux.
Kind regards,
Johan
SSH can be turned off by using system management in the operating system. Disabling ping response is something that can be done with iptables rules. Both things are something that are pretty easy to find instructions about online. Here's some examples;
To turn off SSH service entirely:
systemctl stop --now ssh
systemctl disable --now ssh
And stop responding to ICMP:
nano /etc/sysctl.conf
Add this line:
net.ipv4.icmp_echo_ignore_al = 1
Save and exit from nano, then run:
sysctl -p
Note that you must be root for these commands to work, or else prepend it with sudo, as per normal procedure on Linux.
Kind regards,
Johan
OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support