ssh hangs remotely, but not locally.

From: Dr. David Kirkby (see_my_signature_for_my_real_address_at_hotmail.com)
Date: 12/03/03 

Date: 3 Dec 2003 03:09:17 -0800

I have an IBM RS/6000 7025 F50 running AIX 5.2, which has installed on
it OpenSSH_3.6p1. It is behind quite an expensive ADSL modem, which
has a built in firewall, router, is able to network address
translation etc.

The IBM has an IP of 192.168.1.178 with a netmaks of 255.255.255.0 On
the same subnet are two Suns, both running the same version of SSH.
All machines have a a default route to the ADSL modem.

The Suns can ssh to the IBM and the IBM can ssh to the Suns, with no
problems at all. Hence locally things work as expected.

However, if the modem, which does the network address translation, is
set up to send data on port 22 to the IBM RS/6000, the ssh connection
hangs for a remote user. Running telnet from a remote site to my IP
address on port 22, one can see there is indeed an ssh server, but
it's not possible to do anything with it.

In contrast, if the modem is set up to re-direct connections on ports
22 to either of the Suns, the connection works fine. Hence the only
way to connect to the IBM from a remote site seems to be for me to
configure the NAT to send data on port 22 to a Sun, so its's possible
to log into the Sun via ssh. Once that is done, it's possible to ssh
to the IBM.

Any ideas what could be up? I've looked at the hardware firewall's
logs and can see no packets being rejected. There's no firewall
configured on the IBM.

Dr. David Kirkby,
(email address at http://www.medphys.ucl.ac.uk/~davek/myemail.jpg )

Relevant Pages

  • ssh hangs remotely, but not locally.
    ... The IBM has an IP of 192.168.1.178 with a netmaks of 255.255.255.0 On ... All machines have a a default route to the ADSL modem. ... The Suns can ssh to the IBM and the IBM can ssh to the Suns, ...
    (comp.unix.aix)
  • Re: SSH Vulnerability Fix for AIX?
    ... As long as SSH is NOT AN OFFICIAL PRODUCT from IBM, ... Subject: OpenSSH Security Advisory: buffer.adv ... Please respond to IBM AIX Discussion List ...
    (AIX-L)
  • ssh authentication with RSA SECURID
    ... IBM 150 server running AIX 4.3.3 with RSA/AGENT ... When logging into the IBM 150 using telnet the authentication from RSA ... Management wants ssh used instead of telnet. ... The problem is when I log into the 150 using ssh the ace authentication is ...
    (SSH)
  • SSH Vulnerability Fix for AIX?
    ... Does anyone know if IBM has released an AIX fix for the ... new security vulnerability for SSH? ...
    (AIX-L)