Forum Discussion

Nimbostratus

Dec 08, 2015

GTM listener IP open on SSH from internet

Hi,

I have a GTM with two listener IP address configured. When I am doing a port scan from open internet I am finding that SSH is open for it. Please if someone can tell how can I secure it. Shouldnt listener IP be only accepting connections over Port 53.

nathe
Cirrocumulus
Dec 08, 2015
Mohanish,

Is your GTM listener also a self IP? If so then what is your Port Lockdown settings for the self IP? Allow Default will allow SSH. Any internet facing self IPs should have Allow None as their setting. In your case you may want to create a custom allow and just allow port 53.

Hope this helps,

N