I know your time is valuable so I'm not waiting for specific answers to my situation. I don't mind reading documentation, so pointers to something that converges would be greatly appreciated. I don't plan to waste anyone's time..
This is not an urgent matter and I'm doing this to learn (the "site" doesn't serve anything but to learn to be honest, I'm paying for the hosting just to tinker with that).
This having been said:
I have a Linux shared hosting with GoDaddy. A lot of things need root privileges, which I don't have, since it's a shared account. For instance, changing the
/etc/ssh/ssh_config file can't be done since I don't have the permission.
I am having difficulties since my ISP assigns me a dynamic IP address which changes whenever the router is rebooted, so each time the IP changes, I have to allow that IP to SSH to the GoDaddy host.
I am able to SSH tunnel, but I have to go through cPanel in the following steps:
- Login to my GoDaddy account.
- Go to Hosting and then "Launch" the "site".
- Go to "Security" and enable "SSH" which then opens a window with my IP address to allow.
I have an iMacro that does all this, so I only have to "Play" the iMacro to do that, and then "open a tunnel" using:
ssh -D 9999 user@remote_host -N
And then, on my laptop (Ubuntu) go to Network Proxy, choose "Manual":
"Socks Host" : localhost and port 999
Side question: Is there a better way to do it.
Question 1: Is there a better way to do it ? Like store a key here and whenever I try to SSH to the box, it authenticates me based on that key present in my laptop whatever my IP happens to be ?
Issue 2: I scanned that remote machine recently and found about 17 ports open. I don't like that.
Question 2: How can I close ports without having root privileges and without going through the crappy cPanel (since it's limited to the buttons they put in there and lacks flexibility).
I want to make it less insecure than it already is. Maybe assign SSH another port than 22, etc..
Any pointers would be greatly appreciated.
Thank you for your time.
Linux host 2.6.32-458.18.1.lve1.2.39.el6.x86_64 #1 SMP Mon Sep 16 12:10:28 EEST 2013 x86_64 x86_64 x86_64 GNU/Linux ssh -V
OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb 2013
If you need any further detail, I'm here.