Re: SSH with IPmasq

2001-03-13 Thread Christoph Simon
On Tue, 13 Mar 2001 06:40:41 -0700
ray p <[EMAIL PROTECTED]> wrote:

> I have a firewall (floppyfw) based that I am trying to do SSH through to 
> my Debian box on the other side and it will not work. I have uncommented 
> the lines that are supposed to allow forwarding to the box behind it in 
> the scripts and still everytime I try to connect I get connection 
> refused. I know that SSH is up and running on my Debian box and can  
> connect to it from other machines on my home network. But I can not get 
> to it from the other side of the firewall. Any ideas or suggestions please?

If you have a default policy of ACCEPT for all (bad idea) a DNAT rule
in the PREROUTING chain of the nat table and enabling forwarding in
the kernel by:
echo 1 > /proc/sys/net/ipv4/ip_forward
would suffice. Else you'll need to allow the packages pass through
nat's POSTROUTING and filtern's FORWARD chain.

It's working here.

HTH

--
Christoph Simon
[EMAIL PROTECTED]
---
^X^C
q
quit
:q
^C
end
x
exit
ZZ
^D
?
help
shit
.



Re: SSH with IPmasq

2001-03-13 Thread David B . Harris
To quote ray p <[EMAIL PROTECTED]>,
# I have a firewall (floppyfw) based that I am trying to do SSH through
to 
# my Debian box on the other side and it will not work. I have
uncommented 
# the lines that are supposed to allow forwarding to the box behind it
in 
# the scripts and still everytime I try to connect I get connection 
# refused. I know that SSH is up and running on my Debian box and can  
# connect to it from other machines on my home network. But I can not
get 
# to it from the other side of the firewall. Any ideas or suggestions
please?

I think this is a problem with your router, not Debian.

That said, could you supply some more information? Specifically, any and
all firewall rules that you have set up on the router(to get a list, run
'ipchains -L -n'). If you could attach whatever scripts the floppyfw
uses to set up the firewall, that would be ideal.

Also, you might consider going with a full-featured router-on-a-floppy
distribution. the LRP(Linux Router Project) is good. For something a bit
more friendly, check out the Coyote Linux distribution, which is also
based on the LRP.

David Barclay Harris, Clan Barclay
Aut agere, aut mori. (Either action, or death.)



SSH with IPmasq

2001-03-13 Thread ray p
I have a firewall (floppyfw) based that I am trying to do SSH through to 
my Debian box on the other side and it will not work. I have uncommented 
the lines that are supposed to allow forwarding to the box behind it in 
the scripts and still everytime I try to connect I get connection 
refused. I know that SSH is up and running on my Debian box and can  
connect to it from other machines on my home network. But I can not get 
to it from the other side of the firewall. Any ideas or suggestions please?