cant ssh on remotely - local lan = fine - HELP

1ofaKind · 4 Jul 2008 at 21:35

Hi All,

Not really used linux before (use other Unix flavours for ages). Installed latest ubuntu, patched it up. Put it on a static IP range say 192.168.1.100 (server).

Installed ssh - works fine on local PC's. So wanted to test remote connection.

I have got Netgear 834G adsl router. I have port forwarded 22, 23 (trying telnet) and also 1194 (when installing openvpn) to 192.168.1.100.

When I try to ssh on remotely I can see in the netgears log that it has spotted port 22 and forwarded it on but it just times out.

I even moved ssh up to 22222 just in case port 22 was blocked but made no difference.

Did an iptables -L and it showed no entries (default I guess). Installed ufw and added allows for udp/tcp on ports 22,23,1194 & 22222 but that made no difference either.

I've setup /etc/hosts.allow & deny (I know they are working as I tinkered with removing some IP's to make sure the local lan worked/not worked)

So I have another box (Sco) running ssh so I port forwarded the router to this IP and worked fine - the Sco box isn't internet facing so has no firewall etc.

Can't see anything in the log files saying that it's being bounced, or failed entry or anything.

I bet it's something obvious but it's starting to annoy me now

Cheers all.

Beepcake · 4 Jul 2008 at 22:40

Sure the Linux box has a default gateway?

1ofaKind · 4 Jul 2008 at 23:20

Hiya,

Yes default gateway is the set as the router 192.168.1.1 (I can see out to the net, web browse from desktop etc).

Trifid · 5 Jul 2008 at 09:52

You are connecting to your external IP address and not your internal LAN IP?

tntcoder · 5 Jul 2008 at 09:57

Is the connection outright refused? Or does it timeout?

If it times out try turning dns off in /etc/ssh/sshd_config and set UseDNS to no, also check that ListenAddress is 0.0.0.0

Failing that, http://www.t1shopper.com/tools/port-scanner/ see if that reports the ssh port open.

1ofaKind · 5 Jul 2008 at 11:45

It was timing out. I used ssh -v to see what it was doing and it was just timing out (but when I had the other box it worked straight away).

I used an old 56k internet dialup on a laptop to make sure the external IP was working (to make sure I was coming in from the outside world). As I say on the router logs I can see my connections coming in from completely different IP's and being forwarded.

I'll give that a try tntcoder - I did wonder if it was trying to do some form of reverse lookups or something weird and thats why it timed.

Thanks for the help so far guys.

Beepcake · 5 Jul 2008 at 15:54

Might be worth dumping your ssh_config in here if you still can't get it working.. sure someone can spot the problem

mynsa · 8 Jul 2008 at 08:53

/etc/init.d/iptables stop

try turning off iptables, you can turn it back on with start

1ofaKind · 8 Jul 2008 at 09:12

Hi All,

Got my m8 onto it yesterday and it had him stumped for ages aswell (he knows Linux a lot better than me) and got it working. Was the sshd_config had some ListenAddress stuff that we commented out and works fine now.

Thanks for all the help - much appreciated.