(E-Mail Removed) wrote:
> Hi,
> I am trying to get through iptables firewall to get ssh to an internal
> machine. On the firewall machine, the following are the ules I have
> added to get ssh request forwarded to the internal machine:
> output of iptables -L -v (the following additional rules I have added
> into the existing firewall)
> ...........................
>
> 0 0 ACCEPT tcp -- eth2 any anywhere
> anywhere tcp dpt:ssh
> 0 0 ACCEPT udp -- eth2 any anywhere
> anywhere udp dpt:ssh
> ............................................
>
> 0 0 ACCEPT tcp -- eth2 eth1 anywhere
> anywhere tcp dpt:ssh
>
> eth2 is the external interface and eth1 is the inetrnal interface.
>
> When I try to ssh to the firewall machine, it asks for the password and
> then after three tries rejects it!
> Eeven when I try to ssh the firewall machine from itself it rejects as
> well!
> Do I need to change some configuration of ssh as well, I am slightly
> lost !!
If it asks for the password, it is not a firewall issue.
Are you attempting to log in as 'root'?
If yes, try using another username in the
target computer. Pretty many SSH installations
disable direct log in as 'root' for a good reason,
DO NOT CHANGE IT!
To get in as root, log in as another username
and use su or sudo to gain root access.
--
Tauno Voipio
tauno voipio (at) iki fi