Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 Jan 2005 22:10:23 +0100
From:      Hexren <me@hexren.net>
To:        Kosta Kilim <kopno@sdf.lonestar.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: sshd port number ?
Message-ID:  <12318458361.20050124221023@hexren.net>
In-Reply-To: <20050124210109.GA14171@SDF.LONESTAR.ORG>
References:  <20050124210109.GA14171@SDF.LONESTAR.ORG>

next in thread | previous in thread | raw e-mail | index | archive | help
KK> Hello,


KK> while reading some mail archives about SSH somebody argued
KK> that sshd shouldn't be started on a port bigger than 1024,
KK> since ports below that are priveleged ports.

KK> How does that make sshd less secure if its on a port above                                
KK> 1024 ?  
  
KK> Thanks


KK> _______________________________________________
KK> freebsd-questions@freebsd.org mailing list
KK> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
KK> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"

---------------------------------------------

If ssh ever goes down, a user could start his own compromised
version of ssh and do some nasty stuff. The same user could not do
that if the connecting side would expect sshd to be on a privileged
port because the system ensures that only procs running with superuser
privileges can bind to a privileged port.

Hexren



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?12318458361.20050124221023>