ssh over internet

[matuskap]

In router i only opened port for server and also set static LAN address for it. So its assigned the same subnetwork address every time it reconnects. My internet connection tho isnt static so i have to check that one every time i relog and so...

[Slim Odds]

In router i only opened port for server and also set static LAN address for it. So its assigned the same subnetwork address every time it reconnects. My internet connection tho isnt static so i have to check that one every time i relog and so...

It still sounds like port 8888 is not getting to your router. Try port 22 or 23 instead. I once worked at a company that was blocking 22 outbound, so I changed to 23 and that worked fine.

[matuskap]

Port 22 gets me inside the router. I mean router itself... Thats why i tried to redirect via 8888.

[Urbanmoth]

This may sound dumb (and apologies if it is!) but have you tried to connect without a username? i.e. ssh - p 8888 <your_ip> and force a full login?

[Slim Odds]

Port 22 gets me inside the router. I mean router itself... Thats why i tried to redirect via 8888.

8888 is not a good choice as it is reserved for other uses.

Why don't you use 22? or 23?

[Hawkoon]

Port 22 gets me inside the router. I mean router itself...

I don't know what you mean by that. Is the router running some service on 22???

Did you try any ports above 50.000 for forwarding, and any other ports on the ssh server apart from 22 (e.g. the same you use for forwarding)? I know you said ssh is working via LAN, but everyone seems to be running out of ideas. Also, you need to restart the server after editing sshd_config (sorry if you know all this already).

And just to double check, can you post output from ifconfig from both server and client and the statement you use to connect via LAN?

~H

[Hawkoon]

ah, seems there ARE still some more ideas out there.... i am such a slow writer

[matuskap]

Router has its own remote access, for remote management via ssh. So if i call ssh -p 22 routeruser@internet_address i get into router itself... Not computer sitting behind listening to 22.

Now:
Ifconfig of server

eth0      Link encap:Ethernet  HWaddr 
          inet addr:192.168.1.5  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::20e:2eff:fe84:198f/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:3614 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2174 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:395505 (395.5 KB)  TX bytes:420332 (420.3 KB)
          Interrupt:11 Base address:0xc000 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:4109 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4109 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:1208743 (1.2 MB)  TX bytes:1208743 (1.2 MB)

virbr0    Link encap:Ethernet  HWaddr 
          inet addr:192.168.122.1  Bcast:192.168.122.255  Mask:255.255.255.0
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

Ifconfig of desktop

eth0      Link encap:Ethernet  HWaddr 
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:47 Base address:0xa000 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:1917 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1917 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:146051 (146.0 KB)  TX bytes:146051 (146.0 KB)

wlan0     Link encap:Ethernet  HWaddr 
          inet addr:192.168.1.3  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::216:eaff:fe65:58c/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1795785 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1034172 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:2603521922 (2.6 GB)  TX bytes:109188948 (109.1 MB)

To connect via LAN(which is currently working) i use

ssh <user>@192.168.1.5

I changed port to 58888 to avoid any collisions with apps using that port by default (apache does so as as ive found out) but outcome still remains the same.

ssh -p 58888 <user>@current_internet_Address

says connection refused for me and nothing happening for others outside my network.

[Urbanmoth]

In your first post (screenshot) it looks like you are forwarding to 192.168.1.3 whereas in your post above you seem to suggest that your server is at 192.168.1.5.

May also be a good idea to edit and hide your mac address info in your last post (I know, I'm paranoid!)

[Hawkoon]

Ahhh, your forwarding rule is wrong. ssh is directed to your desktop, not the server IP. Change the destination IP to 192.168.1.5 and things should finally work for you.

~H