Forum Discussion

Mohanish_169493's avatar
Mohanish_169493
Icon for Nimbostratus rankNimbostratus
Dec 08, 2015

GTM listener IP open on SSH from internet

Hi,

 

I have a GTM with two listener IP address configured. When I am doing a port scan from open internet I am finding that SSH is open for it. Please if someone can tell how can I secure it. Shouldnt listener IP be only accepting connections over Port 53.

 

application delivery
BIG-IP
BIG-IP DNS
f5 big-ip gtm
gtm

1 Reply

Sort By
  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Dec 08, 2015

    Mohanish,

     

    Is your GTM listener also a self IP? If so then what is your Port Lockdown settings for the self IP? Allow Default will allow SSH. Any internet facing self IPs should have Allow None as their setting. In your case you may want to create a custom allow and just allow port 53.

     

    Hope this helps,

     

    N