Re: Wide-open local port forwarding

From: Edward Leiper (E.Leiper_at_sms.ed.ac.uk)
Date: 11/25/05 

Date: Fri, 25 Nov 2005 17:04:09 +0000

I have vague memories of a problem like this where putting the
external IP instead of localhost did the trick - but I can't remember
if it was the same problem that I was trying to solve.

It looks like you're trying to make SSH available on port 60022 as
well as 22. If this is the case, then you'll be better off with a
firewall rule along these lines:

iptables -t nat -A PREROUTING -p tcp --dport 60022 -j REDIRECT --to-ports 22

If you're trying to forward any old port, try running the ssh process
with the -v option and see if it sees the incoming connection to port
60022. If not then there may be a firewall blocking things somewhere.

If that doesn't work, post the output of the ssh process which is
forwarding the ports and the ssh process (use -v again) which is
trying to connect, then it'll be easier for us to work out what's
going on.

Hope that helps!

~Ed

Relevant Pages

  • Re: Question regarding ssh breakin attempt
    ... > always start out with a simple dictionary attack, they quite often revert ... > to my port 22 from varying high port numbers on thier machines. ... They are starting a new ssh process on their machine each time. ...
    (comp.os.linux.misc)
  • ssh tunnel looses local listen port
    ... I have a tunnel set up, local port ... tunneld to remote host port ... The situation is that the tunnel is still there but the ssh process ...
    (comp.security.ssh)
  • Re: remote port forwarding unstable
    ... But i closed the previous console with ssh listening to that port, ... is no ssh process on client when i want to connect again on the same ...
    (SSH)
  • Re: Win32 The RPC server is unavailable
    ... I don't believe it is a firewall rule because the subnet I am using belong ... I have also used telnet to check the port the software is using on a couple ... WIN32 RPC server unavailable error. ...
    (microsoft.public.windows.server.networking)
  • Re: reader
    ... be willing to make a firewall rule that would open port 119 to the MS news ... It is quite easy to specify a destination address and port on ... > thanks for the pointer Andy, you no if theres any other ... >>Posting replies after, rather than before, the message ...
    (microsoft.public.cert.exam.mcse)