I cannot ssh from wan/lan to my pc behind a home server

Aldo Maggi <[email protected]> Wed, 7 Feb 2018 20:41:49 +0100
Newsgroups gmane.linux.debian.devel.firewall
Message-ID <20180207204149.631e230c@paperino>
I'm having problems with ssh from the Wan while contacting my Pc in the
Lan.

It worked when I just had to go through the Router provided by the ISP
but problems arose when I've decided to use a small server which I want
to use as file server for our family Pc's, Laptops and smartphone + for
transferring there the webserver where I have my blog. My home lan
(limiting it to my Pc) is as follows:


    WAN
     |
----------
| Router |
----------
        | 192.168.1.1
        |=20
   eno1 | 192.168.1.120
----------------
|              |
| File Server  |
|              |
----------------
   eno2 | 192.168.3.1
        |
 enp2s0 | 192.168.3.100
----------------
|              |
|   My Pc      |
|              |
----------------

=46rom the File Server I can ssh my pc on port 2222
=46rom the lan (which is in 192.168.1.0) it is not possible to ssh my pc
which is in the 192.168.3.0 net


File Server:
(in "ufw status" output I have left only what I have thought to be of
interest)=20
root@Casa-mia-1:~# ufw status
Status: active

To                         Action      From
--                         ------      ----
22/tcp                     ALLOW       Anywhere                 =20
OpenSSH                    ALLOW       Anywhere                 =20
SSH                        ALLOW       Anywhere                 =20
Anywhere                   ALLOW       192.168.3.100            =20
Anywhere                   ALLOW       192.168.3.0/24           =20
2222/tcp                   ALLOW       Anywhere                 =20
22/tcp (v6)                ALLOW       Anywhere (v6)            =20
OpenSSH (v6)               ALLOW       Anywhere (v6)            =20
SSH (v6)                   ALLOW       Anywhere (v6)            =20
2222/tcp (v6)              ALLOW       Anywhere (v6)  =20


root@Casa-mia-1:~# iptables -t nat -L -n -v
Chain PREROUTING (policy ACCEPT 1081 packets, 70666 bytes)
 pkts bytes target     prot opt in     out     source
destination 0     0 DNAT       tcp  --  eno1   *
0.0.0.0/0            192.168.1.120        tcp dpt:2222
to:192.168.3.1:2222

Chain INPUT (policy ACCEPT 21 packets, 2919 bytes)
 pkts bytes target     prot opt in     out     source
destination        =20

Chain OUTPUT (policy ACCEPT 125 packets, 8738 bytes)
 pkts bytes target     prot opt in     out     source
destination        =20

Chain POSTROUTING (policy ACCEPT 125 packets, 8738 bytes)
 pkts bytes target     prot opt in     out     source
destination 885 56073 MASQUERADE  all  --  *      eno1
192.168.3.0/24       0.0.0.0/0  =20

root@Casa-mia-1:~# cat /etc/ufw/sysctl.conf |grep -i ip_forward
net/ipv4/ip_forward=3D1

My Pc:

root@aldomaggi:~# iptables -t nat -L -n
-v Chain PREROUTING (policy ACCEPT 0 packets, 0
bytes) pkts bytes target     prot opt in     out
source
destination=20
Chain INPUT (policy ACCEPT 0 packets, 0
bytes) pkts bytes target     prot opt in     out
source
destination=20
Chain OUTPUT (policy ACCEPT 0 packets, 0
bytes) pkts bytes target     prot opt in     out
source
destination=20
Chain POSTROUTING (policy ACCEPT 0 packets, 0
bytes) pkts bytes target     prot opt in     out
source destination =20

root@aldomaggi:~# cat /etc/ssh/sshd_config |grep -i port
#Porta non standard 2222
Port 2222

I thank you in advance for any help you can give me!

Aldo :-)


     =20