Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #225670 > unrolled thread

[OT] Remote SSH (dynamic IP) without third-party server

Back to article view | Back to linux.debian.user

Contents

  [OT] Remote SSH (dynamic IP) without third-party server riveravaldez <riveravaldezmail@gmail.com> - 2020-08-01 04:10 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server David Christensen <dpchrist@holgerdanske.com> - 2020-08-01 08:20 +0200
      Re: [OT] Remote SSH (dynamic IP) without third-party server deloptes <deloptes@gmail.com> - 2020-08-01 14:00 +0200
        Re: [OT] Remote SSH (dynamic IP) without third-party server Dan Purgert <dan@djph.net> - 2020-08-01 17:50 +0200
        Re: [OT] Remote SSH (dynamic IP) without third-party server David Christensen <dpchrist@holgerdanske.com> - 2020-08-02 00:30 +0200
          Re: [OT] Remote SSH (dynamic IP) without third-party server Michael Stone <mstone@debian.org> - 2020-08-02 01:10 +0200
            Re: [OT] Remote SSH (dynamic IP) without third-party server David Christensen <dpchrist@holgerdanske.com> - 2020-08-02 03:50 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server <tomas@tuxteam.de> - 2020-08-01 09:50 +0200
      Re: [OT] Remote SSH (dynamic IP) without third-party server martin f krafft <madduck@debian.org> - 2020-08-01 12:30 +0200
        Re: [OT] Remote SSH (dynamic IP) without third-party server tomas@tuxteam.de - 2020-08-01 14:40 +0200
          Re: [OT] Remote SSH (dynamic IP) without third-party server martin f krafft <madduck@debian.org> - 2020-08-02 01:20 +0200
        Re: [OT] Remote SSH (dynamic IP) without third-party server riveravaldez <riveravaldezmail@gmail.com> - 2020-08-02 04:40 +0200
          Re: [OT] Remote SSH (dynamic IP) without third-party server martin f krafft <madduck@debian.org> - 2020-08-03 01:10 +0200
            Re: [OT] Remote SSH (dynamic IP) without third-party server martin f krafft <madduck@debian.org> - 2020-08-11 01:20 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server Joe <joe@jretrading.com> - 2020-08-01 10:00 +0200
      Re: [OT] Remote SSH (dynamic IP) without third-party server riveravaldez <riveravaldezmail@gmail.com> - 2020-08-01 11:40 +0200
        Re: [OT] Remote SSH (dynamic IP) without third-party server deloptes <deloptes@gmail.com> - 2020-08-01 14:10 +0200
          Re: [OT] Remote SSH (dynamic IP) without third-party server mick crane <mick.crane@gmail.com> - 2020-08-01 14:30 +0200
          Re: [OT] Remote SSH (dynamic IP) without third-party server rhkramer@gmail.com - 2020-08-01 17:30 +0200
          Re: [OT] Remote SSH (dynamic IP) without third-party server David Wright <deblis@lionunicorn.co.uk> - 2020-08-02 06:00 +0200
            Re: [OT] Remote SSH (dynamic IP) without third-party server Gene Heskett <gheskett@shentel.net> - 2020-08-02 07:10 +0200
              Re: [OT] Remote SSH (dynamic IP) without third-party server David Wright <deblis@lionunicorn.co.uk> - 2020-08-02 22:10 +0200
                Re: [OT] Remote SSH (dynamic IP) without third-party server Gene Heskett <gheskett@shentel.net> - 2020-08-02 22:50 +0200
            Re: [OT] Remote SSH (dynamic IP) without third-party server Greg Wooledge <wooledg@eeg.ccf.org> - 2020-08-03 14:00 +0200
              Re: [OT] Remote SSH (dynamic IP) without third-party server Greg Wooledge <wooledg@eeg.ccf.org> - 2020-08-03 21:20 +0200
                Re: [OT] Remote SSH (dynamic IP) without third-party server Charles Curley <charlescurley@charlescurley.com> - 2020-08-03 23:10 +0200
                  Re: [OT] Remote SSH (dynamic IP) without third-party server rhkramer@gmail.com - 2020-08-03 23:30 +0200
                    Re: [OT] Remote SSH (dynamic IP) without third-party server David Wright <deblis@lionunicorn.co.uk> - 2020-08-04 03:10 +0200
                  Re: [OT] Remote SSH (dynamic IP) without third-party server Michael Stone <mstone@debian.org> - 2020-08-04 03:40 +0200
                    Re: [OT] Remote SSH (dynamic IP) without third-party server David Wright <deblis@lionunicorn.co.uk> - 2020-08-04 04:10 +0200
                      Re: [OT] Remote SSH (dynamic IP) without third-party server Stefan Monnier <monnier@iro.umontreal.ca> - 2020-08-04 04:20 +0200
                        Re: [OT] Remote SSH (dynamic IP) without third-party server David Wright <deblis@lionunicorn.co.uk> - 2020-08-04 06:00 +0200
                          Re: [OT] Remote SSH (dynamic IP) without third-party server Michael Stone <mstone@debian.org> - 2020-08-04 14:40 +0200
                            Re: [OT] Remote SSH (dynamic IP) without third-party server David Wright <deblis@lionunicorn.co.uk> - 2020-08-11 06:20 +0200
                              Re: [OT] Remote SSH (dynamic IP) without third-party server Greg Wooledge <wooledg@eeg.ccf.org> - 2020-08-11 13:40 +0200
                                Re: [OT] Remote SSH (dynamic IP) without third-party server David Wright <deblis@lionunicorn.co.uk> - 2020-08-12 05:30 +0200
                              Re: [OT] Remote SSH (dynamic IP) without third-party server Michael Stone <mstone@debian.org> - 2020-08-11 14:20 +0200
                                Re: [OT] Remote SSH (dynamic IP) without third-party server David Wright <deblis@lionunicorn.co.uk> - 2020-08-12 05:30 +0200
                                  Re: [OT] Remote SSH (dynamic IP) without third-party server Michael Stone <mstone@debian.org> - 2020-08-12 13:40 +0200
                                    Re: [OT] Remote SSH (dynamic IP) without third-party server David Wright <deblis@lionunicorn.co.uk> - 2020-08-13 16:10 +0200
                          Re: [OT] Remote SSH (dynamic IP) without third-party server Celejar <celejar@gmail.com> - 2020-08-04 16:10 +0200
                      Re: [OT] Remote SSH (dynamic IP) without third-party server Michael Stone <mstone@debian.org> - 2020-08-04 14:40 +0200
                      Re: [OT] Remote SSH (dynamic IP) without third-party server Charles Curley <charlescurley@charlescurley.com> - 2020-08-04 19:50 +0200
                  Re: [OT] Remote SSH (dynamic IP) without third-party server Greg Wooledge <wooledg@eeg.ccf.org> - 2020-08-04 13:50 +0200
                    Re: [OT] Remote SSH (dynamic IP) without third-party server Celejar <celejar@gmail.com> - 2020-08-04 15:40 +0200
              Re: [OT] Remote SSH (dynamic IP) without third-party server David Wright <deblis@lionunicorn.co.uk> - 2020-08-03 21:20 +0200
                Re: [OT] Remote SSH (dynamic IP) without third-party server Nate Bargmann <n0nb@n0nb.us> - 2020-08-04 02:00 +0200
                  Re: [OT] Remote SSH (dynamic IP) without third-party server David Wright <deblis@lionunicorn.co.uk> - 2020-08-04 03:10 +0200
                  Re: [OT] Remote SSH (dynamic IP) without third-party server Stefan Monnier <monnier@iro.umontreal.ca> - 2020-08-04 04:30 +0200
                  Re: [OT] Remote SSH (dynamic IP) without third-party server David Christensen <dpchrist@holgerdanske.com> - 2020-08-04 10:50 +0200
      Re: [OT] Remote SSH (dynamic IP) without third-party server "Thomas Schmitt" <scdbackup@gmx.net> - 2020-08-01 12:00 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server Dan Ritter <dsr@randomstring.org> - 2020-08-01 13:10 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server rhkramer@gmail.com - 2020-08-01 13:20 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server David <bouncingcats@gmail.com> - 2020-08-01 14:10 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server Reco <recoverym4n@enotuniq.net> - 2020-08-01 14:40 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server Reco <recoverym4n@enotuniq.net> - 2020-08-01 14:40 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server Michael Stone <mstone@debian.org> - 2020-08-01 17:20 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server "007@caiway.net" <007@caiway.net> - 2020-08-01 17:40 +0200
      Re: [OT] Remote SSH (dynamic IP) without third-party server "007@caiway.net" <007@caiway.net> - 2020-08-01 18:10 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server Nate Bargmann <n0nb@n0nb.us> - 2020-08-01 19:50 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server Henrique de Moraes Holschuh <hmh@debian.org> - 2020-08-01 21:40 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server MAS Jean-Louis <jean-louis.mas@imag.fr> - 2020-08-04 16:00 +0200
      Re: [OT] Remote SSH (dynamic IP) without third-party server Michael Stone <mstone@debian.org> - 2020-08-04 16:20 +0200
      Re: [OT] Remote SSH (dynamic IP) without third-party server Andrei POPESCU <andreimpopescu@gmail.com> - 2020-08-04 17:40 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server Andrei POPESCU <andreimpopescu@gmail.com> - 2020-08-04 17:50 +0200
    Re: [OT] Remote SSH (dynamic IP) without third-party server Curt <curty@free.fr> - 2020-08-04 19:10 +0200
      Re: [OT] Remote SSH (dynamic IP) without third-party server Gene Heskett <gheskett@shentel.net> - 2020-08-04 21:40 +0200
        Re: [OT] Remote SSH (dynamic IP) without third-party server Andrei POPESCU <andreimpopescu@gmail.com> - 2020-08-05 09:40 +0200

Page 3 of 4 — ← Prev page 1 2 [3] 4  Next page →

#225830

On Mon, 3 Aug 2020 22:52:58 -0500
David Wright <deblis@lionunicorn.co.uk> wrote:

> On Mon 03 Aug 2020 at 22:15:25 (-0400), Stefan Monnier wrote:
> > > How do you keep this set of dynamic DNS providers informed each time
> > > your home's IP address changes, bearing in mind nobody's at home?
> > 
> > It's called a "dynamic DNS (DDNS) client" and runs on your router (it sends
> > the new IP to the DDNS server whenever your router gets one).
> > 
> > Most home routers come with built-in support for some DDNS protocols.
> > Of course, I recommend upgrading your router to a firmware like OpenWRT
> > if at all possible, and not just so you get a large choice of
> > DDNS clients.
> 
> I see. Not being familiar with the service, should I understand that
> I could get one such address from no-ip.com for free? DynDNS costs.

Yes, and there are many other free ddns services available. I personally use
afraid.org and nsupdate.info.

Celejar

[toc] | [prev] | [next] | [standalone]

#225823

On Mon, Aug 03, 2020 at 09:05:57PM -0500, David Wright wrote:
>How do you keep this set of dynamic DNS providers informed each time
>your home's IP address changes, bearing in mind nobody's at home?

A program runs on the local machine which updates the dynamic DNS 
entries, either periodically or tied to DHCP/PPP. This was a solved 
problem 20+ years ago.

[toc] | [prev] | [next] | [standalone]

#225850

On Mon, 3 Aug 2020 21:05:57 -0500
David Wright <deblis@lionunicorn.co.uk> wrote:

> How do you keep this set of dynamic DNS providers informed each time
> your home's IP address changes, bearing in mind nobody's at home?

I do that with ddclient. Run:

apt show ddclient

You may want to ensure that ddclient supports the ddns server you use.
I use changeip.com.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

[toc] | [prev] | [next] | [standalone]

#225820

On Mon, Aug 03, 2020 at 02:38:13PM -0600, Charles Curley wrote:
> On Mon, 3 Aug 2020 15:18:46 -0400
> Greg Wooledge <wooledg@eeg.ccf.org> wrote:
> 
> > On Mon, Aug 03, 2020 at 02:15:17PM -0500, David Wright wrote:
> > > The home PC that I'd be trying to contact has a 192.168.n.n IP
> > > address given to it by my primary router. But the router's external
> > > address is obtained by its DHCP client talking to my ISP's DHCP
> > > server.  
> > 
> > In a case like that, just contact an external web site that tells you
> > what your externally visible IP address is.  There are many of them.
> > Mine is <http://wooledge.org/myip.cgi>.
> > 
> 
> Ah, now you are back to using an external server, which the OP would
> like to avoid.

The only way you can do this without ANY external help is if one of the
two endpoints has a static IP address.  Then you can have the dynamic
one contact the static one by its static IP address.

If both ends are dynamic, there MUST be some third party help.  This
may involve dynamic DNS, or email, or web sites, or Dropbox, or whatever
you can dream up.

Now, in addition to that, my suggestion was simply a response to a
tangential exploration of how the dynamic client can DETERMINE what its
IP address is, so that it can inform the other endpoint.  If the client
is behind a local DHCP server, it won't know what the router's external
IP address is.  How could it?  That information is never given to the
client by the DHCP server.

So the client needs SOME way to determine what information to send to
the other endpoint.  Using one of the several dozen (hundred?) "what
is my IP address" web sites is one such way.

Another way would be for the client to send a generic message to the
static machine, and then have the static machine determine what IP
address the message came from.  Doing that is viable if there is a
direct communication between the two.  If the communication goes
through a third party helper (e.g. email), it may still be possible
to parse the client's original IP address out of the Received: headers
(or analogous tracking information if you're using something other
than email).  Or it may be impossible, if the third party helper does
not reveal such information.

Some of you are assuming that the local router offers an API whereby
clients inside the LAN can determine what the local router's external
IP address is, without going outside the LAN.  That may or may not be
a thing.  I have no idea.  Good luck with that.

[toc] | [prev] | [next] | [standalone]

#225826

On Tue, 4 Aug 2020 07:49:10 -0400
Greg Wooledge <wooledg@eeg.ccf.org> wrote:

> Some of you are assuming that the local router offers an API whereby
> clients inside the LAN can determine what the local router's external
> IP address is, without going outside the LAN.  That may or may not be
> a thing.  I have no idea.  Good luck with that.

Obviously depends on what the router is. For OpenWrt:

https://forum.openwrt.org/t/how-to-get-current-public-ip-address-using-uci/40870/25

Celejar

[toc] | [prev] | [next] | [standalone]

#225784

On Mon 03 Aug 2020 at 07:51:20 (-0400), Greg Wooledge wrote:
> On Sat, Aug 01, 2020 at 10:52:51PM -0500, David Wright wrote:
> > This should be possible for free, so long as you can send emails from
> > home. Just register an account with, say, hotmail, and send an email
> > each day (or at an appropriate interval) from your home's computer.
> 
> Just send your message whenever the IP address changes.  The DHCP client
> daemon has hooks specifically to let you do this.
> 
> https://mywiki.wooledge.org/IpAddress
> 
> You could *also* send the IP address message in a cron job, if you're
> a belt-and-suspenders type of person.  But using the DHCP client hooks
> should be the primary goal.

The home PC that I'd be trying to contact has a 192.168.n.n IP address
given to it by my primary router. But the router's external address is
obtained by its DHCP client talking to my ISP's DHCP server. It's not
obvious to me how to query the router's client except by logging in to
the router's web interface and reading the number from the screen.
(It's a $38 consumer grade.)

Even if it were easy, the benefit of sending an email out every day is
that it indicates the server is still up. (I'm assuming it would be
home alone.)

Cheers,
David.

[toc] | [prev] | [next] | [standalone]

#225799

[Multipart message — attachments visible in raw view] — view raw

* On 2020 03 Aug 14:16 -0500, David Wright wrote:
> The home PC that I'd be trying to contact has a 192.168.n.n IP address
> given to it by my primary router. But the router's external address is
> obtained by its DHCP client talking to my ISP's DHCP server. It's not
> obvious to me how to query the router's client except by logging in to
> the router's web interface and reading the number from the screen.
> (It's a $38 consumer grade.)

Is it possible for you to assign a specific IP address for a given
machine's MAC address from the router?  That is what I do.  My machines
request DHCP and the router serves each the same address that I have
configured for them in the router.  Dynamically served static IP
addresses, if you will.

Let's say machine 1 always gets 192.168.1.1 and machine 2 gets
192.168.1.2 from the router's DHCP server.  To SSH into each from the
public Internet set up port forwarding on the router.  OpenWRT also
allows port translation and some off the shelf routers do not.  As I use
OpenWRT, all of the machines on my LAN listen on port 22 for SSH.  Then
I set up the port forwarding table similar to:

Incoming port	Machine		Port
10022		192.168.1.1	22
20022		192.168.1.2	22

If your router does not do port translation then set up each machine SSH
deamon to listen to the same port, 10022 and 20022 respectively.  I had
an ISP in the past that blocked incoming ports below 1024 so I had to
use higher ports any way as I could not reach my router on port 22 from
the public Internet.

Another approach is to only have one machine handle incoming SSH
requests, in other words, only forward one port number from the public
Internet to that machine.  Then SSH from it to others on your LAN.

There are several approaches.  In each case use public key
authentication and disable password authentication.

- Nate

-- 

"The optimist proclaims that we live in the best of all
possible worlds.  The pessimist fears this is true."

Web: https://www.n0nb.us
Projects: https://github.com/N0NB
GPG fingerprint: 82D6 4F6B 0E67 CD41 F689 BBA6 FB2C 5130 D55A 8819

[toc] | [prev] | [next] | [standalone]

#225801

On Mon 03 Aug 2020 at 18:52:24 (-0500), Nate Bargmann wrote:
> * On 2020 03 Aug 14:16 -0500, David Wright wrote:
> > The home PC that I'd be trying to contact has a 192.168.n.n IP address
> > given to it by my primary router. But the router's external address is
> > obtained by its DHCP client talking to my ISP's DHCP server. It's not
> > obvious to me how to query the router's client except by logging in to
> > the router's web interface and reading the number from the screen.
> > (It's a $38 consumer grade.)
> 
> Is it possible for you to assign a specific IP address for a given
> machine's MAC address from the router?  That is what I do.  My machines
> request DHCP and the router serves each the same address that I have
> configured for them in the router.  Dynamically served static IP
> addresses, if you will.

Yes, except that I have the hosts listed in /etc/hosts on each machine
as well as reserved in the router (the latter does not serve DNS).

> Let's say machine 1 always gets 192.168.1.1 and machine 2 gets
> 192.168.1.2 from the router's DHCP server.  To SSH into each from the
> public Internet set up port forwarding on the router.  OpenWRT also
> allows port translation and some off the shelf routers do not.  As I use
> OpenWRT, all of the machines on my LAN listen on port 22 for SSH.  Then
> I set up the port forwarding table similar to:
> 
> Incoming port	Machine		Port
> 10022		192.168.1.1	22
> 20022		192.168.1.2	22
> 
> If your router does not do port translation then set up each machine SSH
> deamon to listen to the same port, 10022 and 20022 respectively.  I had
> an ISP in the past that blocked incoming ports below 1024 so I had to
> use higher ports any way as I could not reach my router on port 22 from
> the public Internet.
> 
> Another approach is to only have one machine handle incoming SSH
> requests, in other words, only forward one port number from the public
> Internet to that machine.  Then SSH from it to others on your LAN.
> 
> There are several approaches.  In each case use public key
> authentication and disable password authentication.

Yes, all those are simple to set up. But none of that helps determine
the IP address of *your router* at home in Old Podunk, USA when you're
sitting in a hotel in Cocks, England.

Cheers,
David.

[toc] | [prev] | [next] | [standalone]

#225805

> Incoming port	Machine		Port
> 10022		192.168.1.1	22
> 20022		192.168.1.2	22

<bikeshedding>
I personally like using port 22nnn for the SSH port of host 192.168.1.nnn ;-)
</bikeshedding>

[toc] | [prev] | [next] | [standalone]

#225813

On 2020-08-03 16:52, Nate Bargmann wrote:
> Let's say machine 1 always gets 192.168.1.1 and machine 2 gets
> 192.168.1.2 from the router's DHCP server.  To SSH into each from the
> public Internet set up port forwarding on the router.  OpenWRT also
> allows port translation and some off the shelf routers do not.  As I use
> OpenWRT, all of the machines on my LAN listen on port 22 for SSH.  Then
> I set up the port forwarding table similar to:
> 
> Incoming port	Machine		Port
> 10022		192.168.1.1	22
> 20022		192.168.1.2	22

On 2020-08-03 19:18, Stefan Monnier wrote:
 > I personally like using port 22nnn for the SSH port of host 192.168.1.nnn


I have done similar port forwarding tricks in the past.  If/ when I have 
the need again, I will probably do SSH jump hosts:

https://en.wikibooks.org/wiki/OpenSSH%2FCookbook%2FProxies_and_Jump_Hosts


David

[toc] | [prev] | [next] | [standalone]

#225684

Hi,

Joe wrote:
> > Better still is, as David suggested, get a fixed IP address for your
> > home connection, but many ISPs do not offer this option, even for
> > 'business' accounts.

About 20 years ago i solved the problem by letting the modem start script
send a mail to my peer which told him the local IP address.
Nowadays with german Telekom DSL it would suffice to send out a mail
at about 5:00 in the morning, because the router reconnects automatically
around 4:30.
This is not free of third party servers, because we used the servers
of our mail providers as always-ready facilitators.

Even more third party involvement:

Currently i participate in a use case which solves the problem of having
no static IP by letting machines publish their temporary IP via a Dynamic
DNS service provider. The machines' service clients tell the DNS
provider's server their local IP which then appears immediately as IP
of the hostname which was registered at the service provider.
Such services are available for free, with the caveat that they can
throw you out at their discretion.


Have a nice day :)

Thomas

[toc] | [prev] | [next] | [standalone]

#225687

riveravaldez wrote: 
> Is this possible?
> 
> Hi, to clarify: I would like to connect to a remote home-machine
> (dynamic IP) through SSH session but without using a third-party
> server (free or paid), just with software running in both machines.

If just one of your machines has a static IP address or updated
DNS record, you can connect to it from the other machine with
Wireguard. Once the connection is up, you can SSH from either
end.

-dsr-

[toc] | [prev] | [next] | [standalone]

#225688

On Friday, July 31, 2020 10:03:07 PM riveravaldez wrote:
> Is this possible?
> 
> Hi, to clarify: I would like to connect to a remote home-machine
> (dynamic IP) through SSH session but without using a third-party
> server (free or paid), just with software running in both machines.

That is pretty much the way ssh works -- to connect and communicate between 
two machines with ssh, you put ssh software in each machine -- it just happens 
that the software is slightly different, and one machine (and its software) 
acts as a server and the other machine acts as a client.

In my home LAN, I use static IPs (ipv4) on each machine, so to do things on 
the server from the client, I first login starting with a  command like:

From a CLI on the client:

ssh <username on server>@<ip of the server>

e.g., 

ssh riveravaldez@192.168.1.35

I'm then prompted for the password of the user account on the server.

You can set up ssh for passwordless use.

If you don't have static IPs on your LAN, you have to get the IP by some means 
which in any case, can include a domain name form, e.g., mylan.home


> Tox and Jami protocols seem to be able to stablish a quick p2p
> connection in a decentralized fashion (without the need of a central
> server) and I understand that this means that both protocols allow
> each client to find the other one, that is, to know their present IPs
> at all time, no matter how dynamic they are. Is this correct?
> 
> If so, would be possible to use a similar mechanism to obtain at any
> moment the counterpart's IP and then make a SSH login using such
> information?
> 
> If there's any other simpler way (that doesn't imply the use of any
> third party) please let me know, I could use anything that works.
> 
> Thanks a lot!

[toc] | [prev] | [next] | [standalone]

#225691

On Sat, 1 Aug 2020 at 12:03, riveravaldez <riveravaldezmail@gmail.com> wrote:

> Hi, to clarify: I would like to connect to a remote home-machine
> (dynamic IP) through SSH session but without using a third-party
> server (free or paid), just with software running in both machines.
>
> Tox and Jami protocols seem to be able to stablish a quick p2p
> connection in a decentralized fashion (without the need of a central
> server) and I understand that this means that both protocols allow
> each client to find the other one, that is, to know their present IPs
> at all time, no matter how dynamic they are. Is this correct?
>
> If so, would be possible to use a similar mechanism to obtain at any
> moment the counterpart's IP and then make a SSH login using such
> information?
>
> If there's any other simpler way (that doesn't imply the use of any
> third party) please let me know, I could use anything that works.

Hi, it's probably not the answer you want, but just in case it hasn't occurred
to you, the management interface web page of the remote home-machine
ISP connection usually states the dynamic IP in use.

That's how I occasionally solve this problem for managing machines of
non-technical family members at remote locations, I just login to their
ISP account which shows the dynamic IP address.

Also don't open up ssh unless it is secured with public-private keys and
password access is disabled.

[toc] | [prev] | [next] | [standalone]

#225694

On Sat, Aug 01, 2020 at 03:34:27PM +0300, Reco wrote:
> On Fri, Jul 31, 2020 at 11:03:07PM -0300, riveravaldez wrote:
> > If there's any other simpler way (that doesn't imply the use of any
> > third party) please let me know, I could use anything that works.
> 
> Install tor and ncat on both hosts, enable ssh hidden service on at
> least one of them:

A small correction:

echo 'HiddenServiceDir /var/lib/tor/ssh' >> /etc/tor/torrc
echo 'HiddenServicePort 22 127.0.0.1:22'' >>  /etc/tor/torrc

Reco

[toc] | [prev] | [next] | [standalone]

#225695

	Hi.

On Fri, Jul 31, 2020 at 11:03:07PM -0300, riveravaldez wrote:
> If there's any other simpler way (that doesn't imply the use of any
> third party) please let me know, I could use anything that works.

Install tor and ncat on both hosts, enable ssh hidden service on at
least one of them:

mkdir /var/lib/tor/ssh
service tor restart
cat /var/lib/tor/ssh/hostname

Use ssh client to connect to your unique tor address:

ssh -o ProxyCommand "ncat --proxy 127.0.0.1:9050 --proxy-type socks5 %h %p" <your_onion_name_here>


Whenever your hosts are directly accessible from the Internet, or are
behind NAT is not relevant.

Reco

[toc] | [prev] | [next] | [standalone]

#225702

On Fri, Jul 31, 2020 at 11:03:07PM -0300, riveravaldez wrote:
>Hi, to clarify: I would like to connect to a remote home-machine
>(dynamic IP) through SSH session but without using a third-party
>server (free or paid), just with software running in both machines.

It's not possible. The simplest solution with smallest external 
dependency is to just use a free dynamic DNS service to register the 
home IP so you can find it, then you can SSH directly to the home IP 
using the DNS name. You could even use two different dynamic DNS 
providers so you aren't dependent on any one.

[toc] | [prev] | [next] | [standalone]

#225704

On Fri, 31 Jul 2020 23:03:07 -0300
riveravaldez <riveravaldezmail@gmail.com> wrote:

> Is this possible?
> 
> Hi, to clarify: I would like to connect to a remote home-machine
> (dynamic IP) through SSH session but without using a third-party
> server (free or paid), just with software running in both machines.
> 

You could do this with curl and rsync.

Every 10 minutes or so you check your ip address with curl
and  send the result to the other machine with rsync.

That other machine does the same.

I think (not sure) you can expect trouble when both machines get
another ip address within that time interval.
I can live with that, my addresses seldom change.
 

[toc] | [prev] | [next] | [standalone]

#225706

On Sat, 1 Aug 2020 17:23:06 +0200
"007@caiway.net" <007@caiway.net> wrote:

> On Fri, 31 Jul 2020 23:03:07 -0300
> riveravaldez <riveravaldezmail@gmail.com> wrote:
> 
> > Is this possible?
> > 
> > Hi, to clarify: I would like to connect to a remote home-machine
> > (dynamic IP) through SSH session but without using a third-party
> > server (free or paid), just with software running in both machines.
> > 
> 
> You could do this with curl and rsync.
> 
> Every 10 minutes or so you check your ip address with curl

# curl ifconfig.me > ~/ipmachine1

This needs a server on the net (if.config), so this solution is not what
OP wants.

[toc] | [prev] | [next] | [standalone]

#225708

[Multipart message — attachments visible in raw view] — view raw

* On 2020 31 Jul 21:04 -0500, riveravaldez wrote:
> Is this possible?
> 
> Hi, to clarify: I would like to connect to a remote home-machine
> (dynamic IP) through SSH session but without using a third-party
> server (free or paid), just with software running in both machines.

Easy enough with SSH so long as the routable IP address of the target
machine is known.

> If so, would be possible to use a similar mechanism to obtain at any
> moment the counterpart's IP and then make a SSH login using such
> information?

This is where a dynamic DNS provider comes in as there needs to be some
way to discover the routable IP address of the target machine.

Years ago ISPs provided Web server space for personal home pages and
such, a practice that has largely stopped.  I started with writing a
script that scraped my router at the time for the routable IP address
and then uploaded it to my personal Web hosting.  As I knew the file
name I could grab it even though no one else would see it or know it was
there since the Web server sent the index.html file by default when
anyone tried to access the directory with http.  The file placed on the
Web host was a simple two liner with a date/time stamp and the IP
address.  I could then set my SSH alias to that IP address.  As the IP
address did not change often it was quite stable.

Changing to OpenWRT routers meant I lost the Web page to scrape.  I now
have a small PHP script on my Web host (now a paid hosting account
serving my domain) that returns the public IP address and the script
extracts it and updates the "hidden" file.

Now, even that is more or less out of date as since I set up a Freedom
Box, I am eligible for a no cost HOST.freedombox.rocks domain.  Now I
can just point my SSH alias to that (I use non-standard SSH ports and
port forwarding on my router to access a specific host on my LAN).  I
still have my script updating every hour "just in case".

All of these "solutions" require at least a third server which you're
trying to avoid.  Sorry.

- Nate

-- 

"The optimist proclaims that we live in the best of all
possible worlds.  The pessimist fears this is true."

Web: https://www.n0nb.us
Projects: https://github.com/N0NB
GPG fingerprint: 82D6 4F6B 0E67 CD41 F689 BBA6 FB2C 5130 D55A 8819

[toc] | [prev] | [next] | [standalone]

Page 3 of 4 — ← Prev page 1 2 [3] 4  Next page →

Back to top | Article view | linux.debian.user

csiph-web