port forward and ssh

Hi,

I just upgrade IPCop from 1.4. I'm trying to give ssh remote access to a 
host inside the LAN net.

While it was a so simple task in 1.4 for non advanced users now its a 
bit harder with IPCop 2 firewall rules. For me at least.

This is what I do/config:

----

System >> SSH Access

SSH Access *

  no    Support SSH protocol version 1 (required only for old clients)
  yes   Allow TCP Forwarding
  yes   Allow password based authentication
  yes   Allow public key based authentication

* IPCop SSH uses the non-standard Port 8022!

----

Firewall >> Firewall Rules

Port Forwarding:

# Net                                         Net
   Iface           Source                      Iface Internal 
Destination    Remark Action
1 Any      Any:internal_port_number     >>    GREEN 
host.dest.ip.addr:ssh   incoming ssh request (active)
            Advanced options :  Enabled for both : --limit 10/minute ;

----

In remote shell I execute:

~ $ ssh -p internal_host_port_dest [email protected]

and obtain:

ssh: connect to host PUB.IPC.IP.ADDR (internal_host_port_dest) : 
Connection timeout

----

from IPCop ~ # tail -f /var/log/messages

Nov 22 13:44:29 ipcop kernel: RED DROP IN=ppp0 OUT= MAC= SRC=RE.MO.TE.IP 
DST=PUB.IPC.IP.ADDR LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=28590 DF 
PROTO=TCP SPT=42432 DPT=internal_host_port_dest WINDOW=14600 RES=0x00 
SYN URGP=0
Nov 22 13:44:30 ipcop kernel: RED DROP IN=ppp0 OUT= MAC= SRC=RE.MO.TE.IP 
DST=PUB.IPC.IP.ADDR LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=28591 DF 
PROTO=TCP SPT=42432 DPT=internal_host_port_dest WINDOW=14600 RES=0x00 
SYN URGP=0
Nov 22 13:44:32 ipcop kernel: RED DROP IN=ppp0 OUT= MAC= SRC=RE.MO.TE.IP 
DST=PUB.IPC.IP.ADDR LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=28592 DF 
PROTO=TCP SPT=42432 DPT=internal_host_port_dest WINDOW=14600 RES=0x00 
SYN URGP=0
Nov 22 13:44:36 ipcop kernel: RED DROP IN=ppp0 OUT= MAC= SRC=RE.MO.TE.IP 
DST=PUB.IPC.IP.ADDR LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=28593 DF 
PROTO=TCP SPT=42432 DPT=internal_host_port_dest WINDOW=14600 RES=0x00 
SYN URGP=0
Nov 22 13:44:44 ipcop kernel: RED DROP IN=ppp0 OUT= MAC= SRC=RE.MO.TE.IP 
DST=PUB.IPC.IP.ADDR LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=28594 DF 
PROTO=TCP SPT=42432 DPT=internal_host_port_dest WINDOW=14600 RES=0x00 
SYN URGP=0
Nov 22 13:45:00 ipcop kernel: RED DROP IN=ppp0 OUT= MAC= SRC=RE.MO.TE.IP 
DST=PUB.IPC.IP.ADDR LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=28595 DF 
PROTO=TCP SPT=42432 DPT=internal_host_port_dest WINDOW=14600 RES=0x00 
SYN URGP=0

----


Any aid will be appreciate.

Regards


------------------------------------------------------------------------------
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user