forum.excito.org

Hi all.
Got my new B3 before the weekend so I've spent some time setting up and configuring. Now when I'm back at work I realize I can't reach the B3 via ssh from work. Anyone knows why?

I've set up ssh to answer on port 1022 (Changed the "Port 22" to "Port 1022" in sshd_config, haven't touched that config other than that) and set up in the web admin that 1022 should be routed into B3 (a setting which seems to have added "-A INPUT -i eth0 -p tcp -m tcp --dport 1022 -j ACCEPT" into my firewall.conf).

So everything works fine from home, but trying to ssh home from work putty just says "Connection refused". I've also setup port 21 to be routed into B3, and ftp:ing works fine from work, so I get the feeling it's not iptables but sshd that's the problem.

What am I missing?

/Daniel

dissect your problem into steps and read the log files

Ubi wrote:dissect your problem into steps and read the log files

Oh, forgot to say. Nothing happens in any log at all from what I can se when I try to connect.

I'm following another thread though. It could be that port 1022 simply isn't open for outgoing traffic at my work network. I'll check that up before I blame my home network any more

/Daniel

Work blocking non-http traffic seems likely. There are A few web bases ssh options you could try to prove the theory. I've used http://www.serfish.com/console/ a few times myself.

RandomUsername wrote:Work blocking non-http traffic seems likely. There are A few web bases ssh options you could try to prove the theory. I've used http://www.serfish.com/console/ a few times myself.

Well, I'm working at the it department, so I'm on a vlan where most ports are open. So if network team tells me 1022 is closed I'll just ask for another port that is open

For example I know 22 is open, I've always used that to ssh to my old B1. Felt like a good idea though to not use default port since i've seen the number of hacking attempts in the logs of the B1...

/Daniel

I've got the answer now. Ports up to 1024 are normally closed (except of course the ones normally needed). Conclusion is that it was just a stupid choice of port and I'm back on track

/Daniel