OpenSSH w/ Cygwin

[fumbles]

Hello, I know this is not the Windows section and this is on Windows, but Cygwin and OpenSSH are open source (duh).

I'm new to OpenSSH and even newer to Cygwin. I've installed OpenSSH and Cygwin on my computer and I can SSH to it from within my network.

It seems to be rejecting anything from outside. I went through the man pages and didn't find anything useful. I can SSH from another computer inside the router, but when it comes from the outside it say connection timed out.

Now I've checked the router and am sure its getting through.

 110 permit tcp any any eq 22 [b](19 matches)[/b]

I've also set up Windows Firewall to allow things from port 22.

Also get this when I try to SSH from this computer (which is the server) to the global IP address.

C:\>ssh -v xxxx
OpenSSH_4.5p1, OpenSSL 0.9.8d 28 Sep 2006
debug1: Reading configuration data /etc/ssh_config
debug1: Applying options for *
debug1: Connecting to *IP* [*IP*] port 22.
debug1: Connection established.
debug1: identity file /home/Luke/.ssh/id_rsa type 1
debug1: identity file /home/Luke/.ssh/id_dsa type -1
ssh_exchange_identification: Connection closed by remote host

Thanks.

 

[saffyre]

 110 permit tcp any any eq 22 [b](19 matches)[/b]

Im assuming that that is some kind of port forwarding or firewall rule in your router. You need to forward a port 22 to your pc's ip address as well as allow it on the routers firewall.

Maybe the ssh server is bound to lan clients only?

Does it ask you to accept a certificate for the server?

 

[fumbles]

 110 permit tcp any any eq 22 [b](19 matches)[/b]

Im assuming that that is some kind of port forwarding or firewall rule in your router. You need to forward a port 22 to your pc's ip address as well as allow it on the routers firewall.

Maybe the ssh server is bound to lan clients only?

Does it ask you to accept a certificate for the server?

You are correct. I've had done the port forwarding command, and tested that it works. (It's a Cisco 837)

Thing is how do I unbound it?

Nope, didn't get that far.

Thanks.

 

[saffyre]

It probably isnt bound i just know it is possible for increased security. Try specifying a user account like user@xxxx when you connect.