Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #4900

Re: Connecting to an SSH server from the external world

From "Carlos E.R." <robin_listas@es.invalid>
Newsgroups comp.os.linux.networking
Subject Re: Connecting to an SSH server from the external world
Date 2021-05-29 20:56 +0200
Message-ID <sbfaoh-fic.ln1@Telcontar.valinor> (permalink)
References <s8rnfh$qp2$1@gioia.aioe.org>

Show all headers | View raw


On 28/05/2021 23.31, John Smith wrote:
> 	I have the following problem:
> 
> 	I would like to be able to connect from my laptop to my SSH
> server in my internal network, no matter where the laptop may be.
> However, my SSH server accepts connections from specific IP addresses -
> those to do with work - and rejects all others.

Remove this restriction, as you control the server, and instead have the 
server listen to some high port (not 50000, that one is common), and use 
public key certificates, disabling password login. This is what most 
people do and it works.

As an added security, you could do some port knocking.


You might hire an VPN, and connect via it, if you tell the server to 
accept that VPN address. Provided you are sure the VPN will never change.

However, if someone wants to attack you, they will see established 
connections from those addresses, while other addresses fail fast; thus 
they will figure out that they have to "fake" those IP addresses to 
connect to your server.

-- 
Cheers, Carlos.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Connecting to an SSH server from the external world John Smith <12345@whatismyemailaddress.xyz> - 2021-05-28 21:31 +0000
  Re: Connecting to an SSH server from the external world William Unruh <unruh@invalid.ca> - 2021-05-28 22:28 +0000
    Re: Connecting to an SSH server from the external world John Smith <12345@whatismyemailaddress.xyz> - 2021-05-29 14:38 +0000
      Re: Connecting to an SSH server from the external world Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-05-29 17:19 +0200
        Re: Connecting to an SSH server from the external world John Smith <12345@whatismyemailaddress.xyz> - 2021-05-29 16:27 +0000
      Re: Connecting to an SSH server from the external world William Unruh <unruh@invalid.ca> - 2021-05-29 15:27 +0000
        Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-05-29 19:46 -0600
      Re: Connecting to an SSH server from the external world Richard Kettlewell <invalid@invalid.invalid> - 2021-05-30 14:42 +0100
      Re: Connecting to an SSH server from the external world pk <pk@pk.invalid> - 2021-05-30 16:31 +0200
  Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-05-28 16:36 -0600
    Re: Connecting to an SSH server from the external world John Smith <12345@whatismyemailaddress.xyz> - 2021-05-29 14:42 +0000
      Re: Connecting to an SSH server from the external world Marc Haber <mh+usenetspam1118@zugschl.us> - 2021-05-29 18:44 +0200
      Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-05-29 19:37 -0600
  Re: Connecting to an SSH server from the external world Henning Hucke <h_hucke+spam.news@newsmail.aeon.icebear.org> - 2021-05-29 07:17 +0000
    Re: Connecting to an SSH server from the external world "D. Stussy" <spam@spam.org> - 2021-05-29 20:34 -0700
      Re: Connecting to an SSH server from the external world Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-05-30 12:51 +0200
        Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-05-31 22:48 -0600
          Re: Connecting to an SSH server from the external world Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-06-01 18:42 +0200
            Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-06-01 14:46 -0600
              Re: Connecting to an SSH server from the external world Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-06-03 12:50 +0200
                Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-06-03 22:53 -0600
                Re: Connecting to an SSH server from the external world Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-06-05 19:25 +0200
                Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-06-05 16:38 -0600
                Re: Connecting to an SSH server from the external world "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2021-06-05 18:58 -0400
                Re: Connecting to an SSH server from the external world Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-06-12 11:16 +0200
                Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-06-12 11:12 -0600
                Re: Connecting to an SSH server from the external world Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-06-13 13:55 +0200
                Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-06-13 10:40 -0600
                Re: Connecting to an SSH server from the external world Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-06-14 16:29 +0200
                Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-06-14 11:32 -0600
                Re: Connecting to an SSH server from the external world William Unruh <unruh@invalid.ca> - 2021-06-13 17:55 +0000
                Re: Connecting to an SSH server from the external world Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-06-14 16:34 +0200
                Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-06-14 11:39 -0600
                Re: Connecting to an SSH server from the external world William Unruh <unruh@invalid.ca> - 2021-06-14 21:03 +0000
                Re: Connecting to an SSH server from the external world William Unruh <unruh@invalid.ca> - 2021-06-14 22:26 +0000
      Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-05-31 22:45 -0600
  Re: Connecting to an SSH server from the external world Richard Kettlewell <invalid@invalid.invalid> - 2021-05-29 08:55 +0100
  Re: Connecting to an SSH server from the external world Giovanni <lsodgf0@home.net.it> - 2021-05-29 11:01 +0200
    Re: Connecting to an SSH server from the external world Marc Haber <mh+usenetspam1118@zugschl.us> - 2021-05-29 18:44 +0200
      Re: Connecting to an SSH server from the external world Giovanni <lsodgf0@home.net.it> - 2021-05-29 19:14 +0200
        Re: Connecting to an SSH server from the external world William Unruh <unruh@invalid.ca> - 2021-05-29 18:21 +0000
          Re: Connecting to an SSH server from the external world Roger Blake <rogblake@iname.invalid> - 2021-05-29 21:28 +0000
            Re: Connecting to an SSH server from the external world Johann Beretta <beretta@nun-ya-bizness.com> - 2021-05-29 22:03 -0700
              Re: Connecting to an SSH server from the external world Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-05-30 13:02 +0200
                Re: Connecting to an SSH server from the external world Marc Haber <mh+usenetspam1118@zugschl.us> - 2021-05-30 19:35 +0200
                Re: Connecting to an SSH server from the external world Johann Beretta <beretta@nun-ya-bizness.com> - 2021-08-11 11:48 -0700
          Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-05-29 19:41 -0600
            Re: Connecting to an SSH server from the external world William Unruh <unruh@invalid.ca> - 2021-05-30 14:43 +0000
              Re: Connecting to an SSH server from the external world Marc Haber <mh+usenetspam1118@zugschl.us> - 2021-05-31 10:22 +0200
                Re: Connecting to an SSH server from the external world William Unruh <unruh@invalid.ca> - 2021-05-31 17:29 +0000
          Re: Connecting to an SSH server from the external world Marc Haber <mh+usenetspam1118@zugschl.us> - 2021-05-30 12:12 +0200
        Re: Connecting to an SSH server from the external world Marc Haber <mh+usenetspam1118@zugschl.us> - 2021-05-30 12:11 +0200
      Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-05-29 19:48 -0600
        Re: Connecting to an SSH server from the external world Marc Haber <mh+usenetspam1118@zugschl.us> - 2021-05-30 12:13 +0200
  Re: Connecting to an SSH server from the external world "Carlos E.R." <robin_listas@es.invalid> - 2021-05-29 20:56 +0200
    Re: Connecting to an SSH server from the external world Grant Taylor <gtaylor@tnetconsulting.net> - 2021-05-29 19:44 -0600

csiph-web