Remote SSH

I'm running Redhat Advanced 2.1. I need to allow SSH remote logins. I've
(temporarily) placed ALL:ALL in the hosts.allow file. Yet I still cannot
get a remote login. I can login from the LAN fine, but not from accross the
net. Firewall port 22 is open.

Any help appreciated.
bahjah (Tim)

On Sun, 25 Jan 2004 10:39:00 -0600, Bahjah wrote:
> I'm running Redhat Advanced 2.1. I need to allow SSH remote logins. I've
> (temporarily) placed ALL:ALL in the hosts.allow file. Yet I still cannot
> get a remote login. I can login from the LAN fine, but not from accross the
> net. Firewall port 22 is open.

sshd running or have you modifed /etc/xinetd.d/sshd-xinetd

In article <(E-Mail Removed)>, Bit Twister wrote:

>> I'm running Redhat Advanced 2.1. I need to allow SSH remote logins. I've
>> (temporarily) placed ALL:ALL in the hosts.allow file. Yet I still cannot
>> get a remote login. I can login from the LAN fine, but not from accross the
>> net. Firewall port 22 is open.
>
> sshd running or have you modifed /etc/xinetd.d/sshd-xinetd

If that was the problem, he wouldn't be able to log in from his
LAN either.

--
Grant Edwards grante Yow! FROZEN ENTREES may
at be flung by members of
visi.com opposing SWANSON SECTS...

On 25 Jan 2004 17:35:56 GMT, Grant Edwards wrote:
> In article <(E-Mail Removed)>, Bit Twister wrote:
>
>>> I'm running Redhat Advanced 2.1. I need to allow SSH remote logins. I've
>>> (temporarily) placed ALL:ALL in the hosts.allow file. Yet I still cannot
>>> get a remote login. I can login from the LAN fine, but not from accross the
>>> net. Firewall port 22 is open.
>>
>> sshd running or have you modifed /etc/xinetd.d/sshd-xinetd
>
> If that was the problem, he wouldn't be able to log in from his
> LAN either.

True, true, I assumed he was sshing into the lan box, which worked, not the
firewall box. I do not know how he would be able to address a lan
box from accross the internet. Opening port 22 would allow a login
into the firewall box not the lan box.

On Sun, 25 Jan 2004 10:39:00 -0600, Bahjah wrote:

> I'm running Redhat Advanced 2.1. I need to allow SSH remote logins. I've
> (temporarily) placed ALL:ALL in the hosts.allow file. Yet I still cannot
> get a remote login. I can login from the LAN fine, but not from accross the
> net. Firewall port 22 is open.
>
> Any help appreciated.
> bahjah (Tim)

Do you have both TCP and UDP port forwarding enabled on port 22 on your
router? Is port 22 forwarded to the correct IP address?

Bit Twister <(E-Mail Removed)> wrote:
> On Sun, 25 Jan 2004 10:39:00 -0600, Bahjah wrote:
> > I'm running Redhat Advanced 2.1. I need to allow SSH remote logins. I've
> > (temporarily) placed ALL:ALL in the hosts.allow file. Yet I still cannot
> > get a remote login. I can login from the LAN fine, but not from accross the
> > net. Firewall port 22 is open.

> sshd running or have you modifed /etc/xinetd.d/sshd-xinetd

Mh, only a idiot would run sshd from (x)inetd. Guess it's his
outbound router firewall, which doesn't allow&port (22) forward
or/and NAT ssh requests to his system

--
Michael Heiming

Remove +SIGNS and www. if you expect an answer, sorry for
inconvenience, but I get tons of SPAM

There's really not two boxes. Theres a hardware firewall on the wan port
that is forwarding port 22 to to the linux box in question.

"Bit Twister" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On 25 Jan 2004 17:35:56 GMT, Grant Edwards wrote:
> > In article <(E-Mail Removed)>, Bit Twister
wrote:
> >
> >>> I'm running Redhat Advanced 2.1. I need to allow SSH remote logins.
I've
> >>> (temporarily) placed ALL:ALL in the hosts.allow file. Yet I still
cannot
> >>> get a remote login. I can login from the LAN fine, but not from
accross the
> >>> net. Firewall port 22 is open.
> >>
> >> sshd running or have you modifed /etc/xinetd.d/sshd-xinetd
> >
> > If that was the problem, he wouldn't be able to log in from his
> > LAN either.
>
> True, true, I assumed he was sshing into the lan box, which worked, not
the
> firewall box. I do not know how he would be able to address a lan
> box from accross the internet. Opening port 22 would allow a login
> into the firewall box not the lan box.

Best I can tell, the firewall has port 22 open and is being forward to the
right box. However, I can't see anything in the Linux messages log to
suggest it's denying my login.

The response I am getting on the SSH client is winsock error, connecting
refused.

Any help appreciated.

Tim

"General Schvantzkoph" <(E-Mail Removed)> wrote in message
news(E-Mail Removed)...
> On Sun, 25 Jan 2004 10:39:00 -0600, Bahjah wrote:
>
> > I'm running Redhat Advanced 2.1. I need to allow SSH remote logins.
I've
> > (temporarily) placed ALL:ALL in the hosts.allow file. Yet I still
cannot
> > get a remote login. I can login from the LAN fine, but not from accross
the
> > net. Firewall port 22 is open.
> >
> > Any help appreciated.
> > bahjah (Tim)
>
> Do you have both TCP and UDP port forwarding enabled on port 22 on your
> router? Is port 22 forwarded to the correct IP address?
>

charteer <(E-Mail Removed)> wrote:
> There's really not two boxes. Theres a hardware firewall on the wan port
> that is forwarding port 22 to to the linux box in question.

Try as root:

tcpdump -i eth0 port 22

Replace eth0 with your NIC and try connecting via ssh, now you
should see packets coming or your router isn't configured
probably or you don't get out of your ISPs network on port 22.

Try 'man tcpdump' for more options.

BTW
Please stop top-posting.

--
Michael Heiming

Remove +SIGNS and www. if you expect an answer, sorry for
inconvenience, but I get tons of SPAM

"Bahjah" <(E-Mail Removed)> writes:

]I'm running Redhat Advanced 2.1. I need to allow SSH remote logins. I've
](temporarily) placed ALL:ALL in the hosts.allow file. Yet I still cannot
]get a remote login. I can login from the LAN fine, but not from accross the
]net. Firewall port 22 is open.

]Any help appreciated.
]bahjah (Tim)
Look in y our log files to see what is happening.
Sounds like firewall problems.