Restricting users to specific folders via SFTP

How to Restrict SFTP Connections to Specific Ports?

SFTP, or Secure File Transfer Protocol, is a subsystem of SSH used for securely accessing, managing, and transferring large files of data. Chroot or change root is a security feature that restricts users to a certain directory and prevents them from accessing locations outside of their specified directory. To restrict SFTP connections to specific ports you can have another ssh daemon running on a different port and force internal sftp for users connecting on that port alone.

1. Create a separate directory for Ezeelogin gateway users for file transfer.

2. Apply suitable permissions for the '/sftp' directory.

3. Edit the SSH configuration file,  and add the following lines at the end.

4. After making changes to the SSH configuration file, restart the SSH service for the changes to take effect.

From the above configuration users connecting to the port 22 via ssh would be assigned to the ezsh shell and provide SFTP access for specific users under the group "ezuser" on a custom port, 2244 which ensures that the users under the group ezuser is limited to their  home directory under '/sftp'. This chrooting mechanism increase security by limiting users access to their specified directories and prevent them from navigating to other directories outside of their specified directory.