Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 885 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ssh server problems

rjb_01
I'm trying to set up a ssh server behing astaro.
I've done it before but for some reason cannot get my head around v3.0x
Internel network can talk to the outside with no problems. The only thing that can be accessed from outside is the webadmin and the firewall ssh server.. if I turn them on...The ssh server works fine locally and it's gateway is the internel nic on astaro. 

OK so here are the details I've followed the faq and have a ssh_server 192.168.0.112 255.255.255.255 a ssh_service defined 0:63554 22 etc. 
Nat rules:
All>ssh_server/ssh_service 
source translation:none dest:ssh_server/ssh_service

PacketFilter
Any ssh_service ssh_server allow

Actual PacketFilter rule
Chain USR_FORWARD 0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.0.112      tcp spts:0:65534 dpt:22 

NAT rule
Chain AUTO_NAT_PRE 0     0 DNAT       tcp  --  *      *       0.0.0.0/0            192.168.0.112      tcp spts:0:65534 dpt:22 to:192.168.0.112:22 

End result.. Packets are being dropped by the live filter when i try to connect. and possibly port 22 on the firewall is never being forwarded.

Any Ideas??


This thread was automatically locked due to age.
  • 0
    rjb,

      
     All>ssh_server/ssh_service 
    source translation:none dest:ssh_server/ssh_service
     
    If you want to access from outside you have to use DNAT!
    But if you rewrite the ssh packets you won't be able
    to access the external IP of the firewall with ssh
    anymore, if possible use a firewall alias!

    read you
    o|iver