Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Dec 2007 05:44:11 -0500
From:      Gerard Seibert <gerard@seibercom.net>
To:        freebsd-questions@freebsd.org
Subject:   Re: SSH through port forwarding
Message-ID:  <20071218054048.6EE7.A38C9147@seibercom.net>
In-Reply-To: <f5ccf92b0712172147n5f97e8e0qf2c871753f0298bc@mail.gmail.com>
References:  <20071218040802.GB6678@ayn.mi.celestial.com> <f5ccf92b0712172147n5f97e8e0qf2c871753f0298bc@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> On December 18, 2007 at 12:47AM sham khalil wrote:

> On Dec 18, 2007 12:08 PM, Bill Campbell <freebsd@celestial.com> wrote:
> 
> > On Mon, Dec 17, 2007, Andrew Falanga wrote:
> > >Hi,
> > >
> > >I'm having a difficult time working with my father to get the port
> > >forwarding working on his Linksys router to forward SSH requests to his
> > >FreeBSD machine at home.  As near as we can figure, it's setup correctly.
> > >In case anyone here uses this router it is WRT54G and details (including
> > a
> > >users manual) can be found at,
> > >
> > http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US%2FLayout&pagename=Linksys%2FCommon%2FVisitorWrapper&cid=1149562300349
> > .
> > >
> > >Now, I'm in Idaho and he's in NY (which does make things difficult).  Is
> > >there any special tricks to setting up port forwarding for SSH?  Probably
> > >should have checked this first, but I'm going to go look on the handbook
> > >too, just to see.
> >
> > It should Just Work(tm).  I don't have one of those handy, but
> > port forwarding is generally under the Advanced tab Linksys
> > routers.  It may be called Games or something like that.  Forward
> > port 22, ssh, to the internal IP and save the settings.
> >
> > Generally one should have a fixed internal IP for forwarding as
> > DHCP assigned IP addresses may change.
> >
> 
> once you open port 22 to public ip, you'll get people try to bruteforce your
> machine.
> if you don't want that set sshd to listen to a higher number like 5522
> then forward port 5522 from the router to the internal machines.
> 
> unfortunately for wrt54g, you can't forward port 5522 to 22 for internal
> machine.

Security through obscurity is a poor substitute for security. Port scanners
will eventually find that port also.

Have you checked to see if a firewall is set up that could be blocking the
port?


-- 
Gerard



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20071218054048.6EE7.A38C9147>