How to disable SSH?

Installing and Using OpenWrt
1

How to disable SSH while building image? Will Just removing dropbear solve the purpose?

2

Yes, removing dropbear is enough for that.

3 Likes
3

Thanks, any other dependencies, that need to be corrected, so build won't fail.?

4

No dropbear in the image means no failsafe access. Removal after install is perhaps more prudent

2 Likes
5

You mean failsafe mode ? Can we disable SSH ? so that only way to access is luci web UI.
Would that affect Tftp download ?

6

OpenWrt failsafe mode, yes. No SSH server and without something else, you've got no access to failsafe mode.

TFTP is generally provided by the boot loader. OpenWrt firmware doesn't impact it's operation (except for the handful of devices that replace the boot loader).

1 Like
7

Yes, I had been using tftp to load new image. So as long I can load prebuilt image, I am good.
On other Topics too I had been asking about how to write pre-configured default settings. The whole purpose is that , we have an ISP here ,My relatives and friends use same. They provide their Modem. All we need is AP. Now I am planing of giving them pre configured password and other settings. Which they should use as a black box. And if they can just factory reset router. to get these settings back. That is how I plan to save my trouble when they play with settings and they come to me for help. I just can factory reset.

8

Update: I just built new image without including dropbear and it gave no errors. Hope it works well.

9

I still think that disabling failsafe mode will lead to more problems than it solves. It's that "last resort" that is helpful when things go wrong. You can disable running the SSH server with boot-time scripts, but still have it available in an emergency situation.

4 Likes
10

Ok got it. I will try to secure It with big long password. would be much better alternative.

11

Or use SSH keys and no password-only access

7 Likes
12

How is Luci more secure than SSH?
I'll second Jeff's opinion that it is a bad idea to disable it.

1 Like
13

Yes, after my last message with Jeff, I realised that. I am planing f keeping SSH and removing Luci.

1 Like
15

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.