Cobra Forum

Linux => New to Ubuntu => Topic started by: mahesh on Aug 28, 2023, 08:30 AM

Title: UFW -- Questions about 21/tcp and ssh
Post by: mahesh on Aug 28, 2023, 08:30 AM
Hi All,
I have two sets of questions relating to UFW and Ubuntu 20.04:

1/ First, about port 21 tcp:

I forgot to close port 21 on installation of Ubuntu 20.04, so I changed the rules to deny 21/tcp incoming on my UFW. But when I checked status verbose of the UFW, for some reason I instead got as a result:

21/tcp LIMIT IN (from) ANYWHERE

Port 21/tcp is for the File Transfer Protocol, and for making connections to a server (which I do not have, just a regular laptop).

Why did I get "limit in" instead of "deny in"?

(I since changed the rule to "deny in" for port 21 but I am still curious to know what "limit in" means.)


2/ Second, about ssh:

on the following website (https://phoenixnap.com/kb/ssh-to-con...nux-or-windows), I read that I need to enter the commands listed below to check if an SSH client is installed on my Ubuntu 20.04.

I never installed an SSH client on my OS, nor do I want to install one.

Indeed, I read on several Linux websites that by default remote access via ssh is not allowed on Ubuntu 20.04 upon installation of the OS. Rather, the user needs to activate and install SSH themselves.

However, after I followed the instructions and typed ssh in a terminal I got the same result as pictured below (with my own username and the string of digits being different).

My question: how come I have ssh installed on my OS, when I did not do this myself?

Thanks for your help.

Type in ssh and press Enter in the terminal.
If the client is installed, you will receive a response that looks like this:


username@host:~$ sshusage: ssh [-1246AaCfGgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec][-D [bind_address:]port] [-E log_file] [-e escape_char][-F configfile] [-I pkcs11] [-i identity_file][-J [user@]host[ort]] [-L address] [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port] [-Q query_option] [-R address] [-S ctl_path] [-W hostort] [-w local_tun[:remote_tun]][user@]hostname [command]username@host:~$