Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #229425

Re: ssh tunnelling testing

Show all headers | View raw

On 12/7/2020 7:54 PM, Gary Dale wrote:
> On 2020-12-07 13:24, john doe wrote:
>> On 12/7/2020 6:38 PM, Gary Dale wrote:
>
>>
>>> (actually through the /etc/hosts file using the server's name).
>>>
>>> I've set up port forwarding on both my routers (I have an inner network
>>> and an outer one, using the outer network for devices I don't really
>>> control). I can access my Apache2 server on the inner network by
>>> forwarding port 80 on the outer network to the WAN address of the inner
>>> router and forwarding that to my server. Pointing my browser to the
>>> external IP address of the outer router brings up the default page -
>>> which I can change so I know it's the actual local page > However,
>>> when I try to ssh to the same address, it just times out.
>>>
>>> I've compared the sshd.conf file on my local server to one on a remote
>>> server and they are identical. The only uncommented lines are:
>>>
>>> PasswordAuthentication no
>>> ChallengeResponseAuthentication no
>>> UsePAM yes
>>> X11Forwarding yes
>>> PrintMotd no
>>> AcceptEnv LANG LC_*
>>> Subsystem       sftp    /usr/lib/openssh/sftp-server
>>>
>>>
>>> Any ideas on what's going wrong?
>>
>> - This looks like your port forwarding is not working...
>> - What are the logs saying?
>> - Is the SSH server allowing access from the outside?
>>
>>
>> Note that it is unclear to me how you can test outside access from the
>> inside.
>>
> Your first point is what I am complaining about. The outer router
> doesn't have a log function and an ssh attempt never shows up on the
> inner router. As I explained in the initial post, I've set up the port
> forwarding to allow it and the sshd.conf file is identical to one that
> allows access from the outside.
>
> I can test outside access from the inside by trying to connect to the
> external address. As with my browser example, the request goes to the
> device that has the particular IP address being sought. That is the
> external port on the outer router. I can also ssh to the external port
> on the inner router (which I can't think of a reason to do except for
> testing). Interestingly, this works but doesn't get logged.
>
>
>

Sorry, I'm lost at your setup, the only thing that I can say is that
something looks to be  rong with regard to your firewall config.

--
John Doe

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

ssh tunnelling testing Gary Dale <gary@extremeground.com> - 2020-12-07 19:10 +0100
  Re: ssh tunnelling testing john doe <johndoe65534@mail.com> - 2020-12-07 19:30 +0100
    Re: ssh tunnelling testing Gary Dale <gary@extremeground.com> - 2020-12-07 20:00 +0100
      Re: ssh tunnelling testing john doe <johndoe65534@mail.com> - 2020-12-07 20:10 +0100
        Re: ssh tunnelling testing [solved] Gary Dale <gary@extremeground.com> - 2020-12-07 20:20 +0100
          Re: ssh tunnelling testing [solved] john doe <johndoe65534@mail.com> - 2020-12-07 20:30 +0100
            Re: ssh tunnelling testing [solved] Joe <joe@jretrading.com> - 2020-12-07 20:40 +0100
            Re: ssh tunnelling testing [solved] john doe <johndoe65534@mail.com> - 2020-12-07 21:20 +0100
            Re: ssh tunnelling testing [solved] Gary Dale <gary@extremeground.com> - 2020-12-07 22:10 +0100
              Re: ssh tunnelling testing [solved] Gary Dale <gary@extremeground.com> - 2020-12-09 17:00 +0100
                Re: ssh tunnelling testing [solved] Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-10 09:00 +0100
          Re: ssh tunnelling testing [solved] Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-08 10:20 +0100
  Re: ssh tunnelling testing "der.hans" <deb-user@LuftHans.com> - 2020-12-07 20:10 +0100
    Re: ssh tunnelling testing Gary Dale <gary@extremeground.com> - 2020-12-07 22:20 +0100

csiph-web