--On Sunday, November 24, 2002 02:07:37 AM -0800 James Duberg <[EMAIL PROTECTED]> wrote:

Anyway, to my question:

I cannot ssh from one of the firewalls to a remote firewall (Connection
refused). I can, however, ssh from any of the boxes behind a firewall to
the same remote firewall which refused the connnection directly from the
local firewall. This condition is symmetrical, that is, if I go to the
remote location and try to ssh back to the "home' box, I get the same
results. So it is clearly a setup or rules problem, since I am running
the same diskettes, all around.

I tried searching the archives thuough the sourceforge website without
success. I'm not sure whether the search function is working properly.

I'm guessing it's a rules problem. I put this into the Shorwall, Rules
file:

ACCEPT          net:68.8.x.y,68.8.xx.yy,68.8.xxx.yyy         fw tcp     22

Otherwise, Bering/Shorwall is "stock".

That rule accepts incoming connections from the two 68.8.*.8 addresses to the SSH server running on the firewall where you have instantiated that rule. If you are trying to connect from another Bering firewall, that other firewall must have:

ACCEPT fw net:aaa.bbb.ccc.ddd tcp 22

Where aaa.bbb.ccc.ddd is the IP of the firewall where you have the incoming rules that you have posted.

-Tom
--
Tom Eastep \ Shorewall - iptables made easy
AIM: tmeastep \ http://shorewall.sf.net
ICQ: #60745924 \ [EMAIL PROTECTED]



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to