Re: [gentoo-user] Can iptables recognize SSH traffic?

[Greg Bur]

On 10/22/06, Nico Schümann <[EMAIL PROTECTED]> wrote:

Hello folks,

I have a web server running on port 80 and a SSH daemon running on
port 22. I don't want to change these ports because it just works this
way.
Can I configure iptables that it just accepts port 80 and if I try to
connect with a ssh client to port 80 to forward this ssh traffic to
port 22? I know how all this accept and forwards stuff works, but I
can't find out an option to recognize ssh traffic.


You might want to take a look at port knocking:

http://www.linuxjournal.com/article/6811

--
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Can iptables recognize SSH traffic?

[Mauro Faccenda]

On Sunday 22 October 2006 22:07, Nico Schümann wrote:
> Hello folks,
>
> I have a web server running on port 80 and a SSH daemon running on
> port 22. I don't want to change these ports because it just works this
> way.
> Can I configure iptables that it just accepts port 80 and if I try to
> connect with a ssh client to port 80 to forward this ssh traffic to
> port 22? I know how all this accept and forwards stuff works, but I
> can't find out an option to recognize ssh traffic.

i don't think so. for doing it you'll need a application layer firewall...

you should try this: http://l7-filter.sourceforge.net/

[]'s
.m

-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Can iptables recognize SSH traffic?

[Nico Schümann]

Hello folks,

I have a web server running on port 80 and a SSH daemon running on
port 22. I don't want to change these ports because it just works this
way.
Can I configure iptables that it just accepts port 80 and if I try to
connect with a ssh client to port 80 to forward this ssh traffic to
port 22? I know how all this accept and forwards stuff works, but I
can't find out an option to recognize ssh traffic.

Tanks a lot,
Nico
--
gentoo-user@gentoo.org mailing list