Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 5 May 2004 20:44:28 -0700
From:      Kevin Stevens <freebsd@pursued-with.net>
To:        pwd8jmr22w@me.point.ne.jp
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Need Advice in SSH
Message-ID:  <AD51BF8E-9F0F-11D8-8622-000A959CEE6A@pursued-with.net>
In-Reply-To: <200405061224.06064.pwd8jmr22w@me.point.ne.jp>
References:  <200405061032.19742.pwd8jmr22w@me.point.ne.jp> <4099A21D.2030001@users.sourceforge.net> <200405061224.06064.pwd8jmr22w@me.point.ne.jp>

next in thread | previous in thread | raw e-mail | index | archive | help

On May 5, 2004, at 20:24, Bull TORS wrote:

> My laptop in the office (laptop1.mydomain.org) has a static internal 
> network
> address 192.168.1.35 from my company's (companydomain.org) LAN Server.
> My laptop in my home has 192.168.1.x (I am not that sure if it changes 
> a lot
> but I think not) as a DHCP client from my ISP (ispdomain.ne.jp).
> So I think both gets internal network addresses from their respective 
> servers,
> one as a static client and the other as a dynamic client from different
> domains.  Does this mean I can not use ssh from either both PC's?

No, but you need more information.  Some device on each end is 
translating those non-routable private addresses to public ones usable 
on the Internet.  Almost certainly, at least one and probably both are 
blocking inbound SSH connections by default.

It is more likely that you can initiate outbound connections from your 
company's network, and can configure your home network to permit 
inbound connections.

It is much less likely that you will be able to have your company 
network configured to permit inbound connections initiated from your 
home computer.

In either case, you need more detailed information on the 
configurations.  Talk to the IT staff at your company and explain what 
you're trying to do and ask if they permit outbound SSH sessions.  At 
your home, in my experience it's very uncommon for an ISP to provision 
either DHCP or private addresses directly - it's more common for there 
to be a local device in your home that is accomplishing that.  But talk 
to your ISP, it could be different in Japan.

Properly speaking, this has little or nothing to do with FreeBSD, BTW, 
it is general firewall, NAT and SSH information.

KeS



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AD51BF8E-9F0F-11D8-8622-000A959CEE6A>