SSH reenabled

[thalador]

Considering the announcement is locked it must be resurrected here.

Originally Posted by H9Alex

Meaning we will need to add your ip to our firewall rules in order to use this service. We ask when requesting this you include the base server ip or server name you are on, Your ip which can be found at hostnine.com/myip or whatismyip.com and of course your domain. This is the only way we will allow ssh from now on.

Thats all well and good but considering most users (I would guess) have dymanic IP's this means we will have to put in a new support ticket every time our IP changes? Do you H9 guys have any idea how much of a pain this will cause on your side as well as ours? There has got to be a better way to do this other than a firewall rule. Seems you are going to the complete basic solution here. I have been a network admin for 17 years and the only time we would do something like this is when there is no other choice. There are always other choices.

[McCarthySites]

I think this came up as a solution somewhere else and the issue then was multiple access points/proxies. Do they all need to be OK'ed? I also thought 'one host, one IP' was mentioned but that may have been my own theory...

I work at a big company and have, in the past, used SSH to take care of issues (on my coffee break of course!) enabling each proxy my company has, as mentioned above, is going to be a PITA on both ends (no pun intended ;-))

Brian

[asad]

I am pretty frustrated with this as well. I think HostNine should enable it as it was before for the customers who need it. I even use FTP over SSH

Hiya,

Security is the top priority here, if you want to move to a host that doesn't see security as the top priority, I'll personally move your stuff for you. Security should always be number 1 - ALWAYS. That's why we did this, secure port #, IP based access.

I'm sure if your site was hacked, you'd be the first to support this.

I'm sorry for sounding harsh, but this is the reality of the internet, not everyone is here to play fair. We're trying to make it harder for them to bring the foul game to our servers.

[Gene]

Have you thought about using a port other than 22 for SSH? At work we use putty (or other SSH clients) and a port number above 2000 on the public network. (I don't want to say exactly what port) Keeps the hackers away as 22 doesn't respond and anyone doing a "scan" gets their IP locked out/ blocked.

[level09]

Is it possible to enable SSH for an IP Range using ip masking ?
dynamic ip addresses always belong to certain range per country.

this way, no matter what your dynamic ip is, you will always have SSH Access since it is included in that range.

Hi,

The maximum I'm willing to go on this is

#.#.*.*

So as long as the first two octets stay the same, we should be able to do this.