日々精進

内向き、外向き用のsshdを用意する。

まず、シンボリックリンクを作成する

# cd /usr/sbin/
# ln -s sshd sshd-public

起動スクリプトをコピーし、外向き用にスクリプトを書き換える。

# cp /etc/rc.d/init.d/sshd /etc/rc.d/init.d/sshd-public

書き換え場所は次の通り。

# diff -u /etc/init.d/sshd /etc/init.d/sshd-public
--- /etc/init.d/sshd    2010-03-01 07:33:21.000000000 +0900
+++ /etc/init.d/sshd-public     2010-03-31 16:58:14.000000000 +0900
@@ -5,29 +5,29 @@
 # chkconfig: 2345 55 25
 # description: OpenSSH server daemon
 #
-# processname: sshd
+# processname: sshd-public
 # config: /etc/ssh/ssh_host_key
 # config: /etc/ssh/ssh_host_key.pub
 # config: /etc/ssh/ssh_random_seed
-# config: /etc/ssh/sshd_config
-# pidfile: /var/run/sshd.pid
+# config: /etc/ssh/sshd-public_config
+# pidfile: /var/run/sshd-public.pid

 # source function library
 . /etc/rc.d/init.d/functions

 # pull in sysconfig settings
-[ -f /etc/sysconfig/sshd ] && . /etc/sysconfig/sshd
+[ -f /etc/sysconfig/sshd-public ] && . /etc/sysconfig/sshd-public

 RETVAL=0
-prog="sshd"
+prog="sshd-public"

 # Some functions to make the below more readable
 KEYGEN=/usr/bin/ssh-keygen
-SSHD=/usr/sbin/sshd
+SSHD=/usr/sbin/sshd-public
 RSA1_KEY=/etc/ssh/ssh_host_key
 RSA_KEY=/etc/ssh/ssh_host_rsa_key
 DSA_KEY=/etc/ssh/ssh_host_dsa_key
-PID_FILE=/var/run/sshd.pid
+PID_FILE=/var/run/sshd-public.pid

 runlevel=$(set -- $(runlevel); eval "echo \$$#" )

@@ -108,9 +108,9 @@
        cp -af /etc/localtime /var/empty/sshd/etc

        echo -n $"Starting $prog: "
-       $SSHD $OPTIONS && success || failure
+       $SSHD -f /etc/ssh/sshd-public_config && success || failure
        RETVAL=$?
-       [ "$RETVAL" = 0 ] && touch /var/lock/subsys/sshd
+       [ "$RETVAL" = 0 ] && touch /var/lock/subsys/$prog
        echo
 }

@@ -128,7 +128,7 @@
        if [ "x$runlevel" = x0 -o "x$runlevel" = x6 ] ; then
            killall $prog 2>/dev/null
        fi
-       [ "$RETVAL" = 0 ] && rm -f /var/lock/subsys/sshd
+       [ "$RETVAL" = 0 ] && rm -f /var/lock/subsys/$prog
        echo
 }

@@ -159,7 +159,7 @@
                reload
                ;;
        condrestart)
-               if [ -f /var/lock/subsys/sshd ] ; then
+               if [ -f /var/lock/subsys/$prog ] ; then
                        do_restart_sanity_check
                        if [ "$RETVAL" = 0 ] ; then
                                stop

設定ファイルをコピーして、外向き用に書き換える。

# cp /etc/ssh/sshd_config /etc/ssh/sshd-public_config

# diff -u /etc/ssh/sshd_config /etc/ssh/sshd-public_config
--- /etc/ssh/sshd_config        2010-03-31 16:48:10.000000000 +0900
+++ /etc/ssh/sshd-public_config 2010-03-31 16:48:22.000000000 +0900
@@ -1,7 +1,7 @@
-Port 2222
+Port 22
 Protocol 2
 ListenAddress 192.168.0.4
-PidFile /var/run/sshd.pid
+PidFile /var/run/sshd-public.pid
 SyslogFacility AUTHPRIV
 LogLevel INFO
 PermitRootLogin no

これまた、diffで。