Alert for SSH connection on non standard port?

Follow

Kristian Desch

• September 08, 2022 19:56

I've set up rsync backups from a second location, and I do them over a different port (15069) instead of 22.  

I have the Purple and was able to get the port forwarding working fine.

Question, how could I get an alert when SSH traffic starts over port 15069?  Is there a more generalizable way to alert on any protocols operating on non-standard ports?

Thanks!

1

• 

  Firewalla

  • September 08, 2022 21:29

  Is your use case just to know traffic is coming into the port? or want to know if people are scan that port?

   

  0

  Comment actions Permalink
• 

  Kristian Desch

  • September 08, 2022 21:45

  Not port scans, actual traffic. Thanks

  1

  Comment actions Permalink

Please sign in to leave a comment.