SSH through Firewall

[Jonathan Kotta]

On 5/28/07, Bertram Moshier <bertram at bmoshier.net> wrote:
> I have a Dell Precision 390 running RH 4 WS behind a D-Link DI-624 Rev C
> router with a firewall and NAT on.
>
>
>
> I'm wondering if anyone has experience in getting SSH (telnet and ftp) to
> communicate from the public Internet through the firewall and into the local
> LAN system.  Basically, my thought is:
>
>
>
> Public Internet: bmoshier.dnsalias.net port 10022 -> DI-624 ->
> DellPrecision390 Port 22
>

When you test it, do you try to ssh from inside the network?  As in:

390 -> DI-624 -> internet -> DI-624 -> 390

This doesn't work in my experience.  I can access my house from
school; I can access my house from my house via the LAN; I can't
access my house from my house via the internet.

>
>
> I have it working inside the LAN / subnet successfully.  When I try to
> access port 10022 nothing happens.  Nothing in the router's manual is clear
> about making SSH work and treating it like FTP, telnet, HTTP, etc., seems to
> be the wrong direction.
>

When you say it works in the LAN, do you mean that it works on port 10022?

The setting you need to look for in the router is "port forwarding".
It tells the router that if a connection request is made to that port,
to forward that request to whatever ip address you specify.  When you
have port forwarding enabled, the router looks like (from the outside)
the specified host for that port only.

-- 
Thanks,

Jonathan Kotta

Hofstadter's Law:
    It always takes longer than you expect, even
    when you take into account Hofstadter's Law.