How to block ssh access to PVE node?

[NVroom]

Hi,

I'm trying to block all ssh access to proxmox PVE node using firewall in the webgui with no luck. I am not using a cluster so those features dont matter to me.

I'm wondering if there is any other way to do this or to somehow get the firewall to work? I have tried all possible combinations yet ssh is still accessible.

Thanks.

 

[LnxBil]

Do you want to disable SSH for good? Just disable the service, e.g. systemctl disable ssh
You can change the port or apply further restrictions in the main configuration file in /etc/ssh/sshd_config. Please read the manpage for each configuration option.

There are literally hundreds of possibilities to disable "ordinary" SSH. Simple change of the port, restricting to only-key-based access or special users, special src addresses and also the firewall itself. Proxmox VE firewalling is very good, yet not so easy to understand in the beginning. I'd always check the generated iptables rules by hand. IIRC there will be SSH and gui/8006 rules generated automatically.

 

[NVroom]

Do you want to disable SSH for good? Just disable the service, e.g. systemctl disable ssh
You can change the port or apply further restrictions in the main configuration file in /etc/ssh/sshd_config. Please read the manpage for each configuration option.

There are literally hundreds of possibilities to disable "ordinary" SSH. Simple change of the port, restricting to only-key-based access or special users, special src addresses and also the firewall itself. Proxmox VE firewalling is very good, yet not so easy to understand in the beginning. I'd always check the generated iptables rules by hand. IIRC there will be SSH and gui/8006 rules generated automatically.

If I disable ssh will it interfere with the console VNC on the Webui?

 

[LnxBil]

I changed the port and I do not notice any problems.

It's so strange to disable SSH, yet use VNC.

 

[NVroom]

I changed the port and I do not notice any problems.

It's so strange to disable SSH, yet use VNC.

I have disabled password based login, so its secure now. I'm still wanting to know how to use the GUI firewall to block port 22, its not working for me.

 

[LnxBil]

Have you looked at the output of iptables yet? I suppose there is something in there.