- \n
- To test the configuration, paste the command below. If no errors appear, you can proceed to the next steps.
\nsudo sshd -t > Enter
\n![\"test](\"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-content\/uploads\/2025\/10\/test-the-configuration.png\" "\\"test")
<\/a><\/strong><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n- \n
- Add the new port to the firewall:\n
- \n
- If Firewalld is installed, paste the following commands one by one:
\nsudo firewall-cmd –permanent –add-port=6000\/tcp > Enter<\/strong>
\nsudo firewall-cmd –reload > Enter<\/strong><\/li>\n- If Firewalld is not installed or you are using iptables, paste the following commands one by one:
\nsudo iptables -I INPUT -p tcp –dport 6000 -j ACCEPT > Enter\u00a0<\/strong>
\nsudo service iptables save > Enter
\n<\/strong><\/strong>Example of adding with iptables
\n![\"new](\"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-content\/uploads\/2025\/10\/new-port-to-the-firewall.png\" "\\"new")
<\/a><\/strong><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n \n\n\n\n\n- \n
- To restart the SSH service, paste the following command.
\nsudo systemctl restart sshd > Enter\u00a0<\/strong>
\n![\"restart](\"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-content\/uploads\/2025\/10\/restart-the-SSH-service.png\" "\\"restart")
<\/a><\/li>\n- To test access, do not close your current PuTTY session. Open a new PuTTY window, enter your new port number (e.g., 6000) in the “Port” field, and try to connect. If the connection is successful, SSH is now running on the new port.
\n![\"Putty](\"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-content\/uploads\/2025\/10\/Putty-Port.png\" "\\"Putty")
<\/a><\/li>\n- If you wish, you can remove the old port from the firewall. To do this, paste the following commands one by one.\n
- \n
- If Firewalld is installed, paste the following commands one by one:
\nsudo firewall-cmd –permanent –remove-port=22\/tcp<\/strong> (You can replace 22 with your own old port number.) > Enter
\n<\/strong>or sudo firewall-cmd –permanent –remove-port=22667\/tcp <\/strong>(You can replace 22667 with your own old port number.) > Enter
\n<\/strong>
\nsudo firewall-cmd –reload > Enter\u00a0<\/strong><\/li>\n- If Firewalld is not installed or you are using iptables, paste the following commands one by one:
\nsudo iptables -D INPUT -p tcp –dport 6000 -j ACCEPT<\/strong> (Replace 1234 with your chosen new port number.) > Enter\u00a0<\/strong>
\nsudo service iptables save > Enter\u00a0<\/strong><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n","protected":false},"excerpt":{"rendered":"The default SSH port can be changed by server administrators for various reasons. The main reasons for changing the port are as follows: Security Measure:Default SSH ports are constantly scanned by bots on the internet. This causes systems using the standard port to be frequently targeted by password-guessing attacks. To enhance security, server administrators may […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"_links":{"self":[{"href":"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-json\/wp\/v2\/posts\/1594"}],"collection":[{"href":"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-json\/wp\/v2\/comments?post=1594"}],"version-history":[{"count":12,"href":"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-json\/wp\/v2\/posts\/1594\/revisions"}],"predecessor-version":[{"id":1620,"href":"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-json\/wp\/v2\/posts\/1594\/revisions\/1620"}],"wp:attachment":[{"href":"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-json\/wp\/v2\/media?parent=1594"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-json\/wp\/v2\/categories?post=1594"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-json\/wp\/v2\/tags?post=1594"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- If Firewalld is not installed or you are using iptables, paste the following commands one by one:
- To test access, do not close your current PuTTY session. Open a new PuTTY window, enter your new port number (e.g., 6000) in the “Port” field, and try to connect. If the connection is successful, SSH is now running on the new port.
- If Firewalld is not installed or you are using iptables, paste the following commands one by one:
- If Firewalld is installed, paste the following commands one by one:
- Add the new port to the firewall:\n
Default SSH ports are constantly scanned by bots on the internet. This causes systems using the standard port to be frequently targeted by password-guessing attacks. To enhance security, server administrators may change the SSH port to reduce the risk of such attacks.<\/li>\n
In some organizations or networks, the use of standard ports may be blocked for security reasons. In such cases, a different port must be selected to establish an SSH connection.<\/li>\n
If another service on the server uses the same port, the SSH port may be changed to prevent conflicts.<\/li>\n<\/ul>\n
For the reasons mentioned above or similar ones you can follow the steps below to safely change your SSH port.<\/p>\n
- \n
- Log in to the server. If you are not familiar with the steps to access the server, click here to read our guide<\/a>. The following steps use PuTTY as an example.<\/li>\n
- Back up the sshd_config<\/strong> file. Since you will be making changes to the port and security settings, any mistake could prevent you from accessing the server via SSH. Therefore, it is recommended to create a backup beforehand. To back it up, copy the command below, right-click to paste it into the server after connecting, and press Enter.
\nsudo cp \/etc\/ssh\/sshd_config \/etc\/ssh\/sshd_config.bak
\n<\/b>![\"Back](\"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-content\/uploads\/2025\/10\/Back-up-sshd_config.png\" "\\"Back")
<\/a><\/li>\n- To open the SSH configuration file, copy the command below, right-click to paste it into the server, and press Enter.
\nsudo nano \/etc\/ssh\/sshd_config
\n<\/strong>![\"SSH](\"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-content\/uploads\/2025\/10\/SSH-configuration-file.png\" "\\"SSH")
<\/a><\/li>\n- \n
Locate the line in the file that says “Port 22” or “Port 22667”. (You may see a different port number instead of 22 or 22667.) Replace 22 or 22667 with the port number you want, for example, 6000.If there is a \u201c#\u201d at the beginning of the Port line, remove it, because # is treated as a comment and the new port may not take effect. To save, press Ctrl + O and then Enter. Immediately after, press Ctrl + X to exit.<\/p>\n
- \n
- \n
Valid range: 0 – 65535<\/p>\n<\/li>\n
- \n
0 – 1023: Reserved for the operating system and core services. Manual use is not recommended. Examples: 22 and 22667 (SSH), 80 (HTTP), 443 (HTTPS)<\/p>\n<\/li>\n
- \n
1024 – 49151: Registered ports used by software; usually okay to use. Examples: 3306 (MySQL), 3389 (RDP)<\/p>\n<\/li>\n
- \n
49152 – 65535: Usually free ports. This range is the safest choice for your own services.
\n![\"Port\"](\"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-content\/uploads\/2025\/10\/Port-22.png\" "\\"Port")
<\/a>
\n![\"Linux](\"https:\/\/www.fastpanda.co.uk\/knowledge-hub\/wp-content\/uploads\/2025\/10\/Linux-New-Port.png\" "\\"Linux")
<\/a><\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n \n\n\n\n\n\n
- Back up the sshd_config<\/strong> file. Since you will be making changes to the port and security settings, any mistake could prevent you from accessing the server via SSH. Therefore, it is recommended to create a backup beforehand. To back it up, copy the command below, right-click to paste it into the server after connecting, and press Enter.