ssh and routers

ssh and routers

[Chuck Hallenbeck]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have a question which is probably elementary, but I am a
network ninny, and it puzzles me.

I have been ssh'ing  into several other folks computers to assist
with stuff from time to time. One of them recently added a router
to his configuration and I am now unable to reach his machine. He
formerly had a cable modem going direct to his ethernet card, and
now that modem goes to his router, and from there two cables
emerge, one to his ethernet card and the other to the family
Windows machine.

Are there router configuration options that can restore my access
to his system? What should be changed to let me access him again?
The router is a Linksys something or other.

Thanks

Chuck


- -- 
The Moon is Waning Gibbous (85% of Full)
My home page is now at http://www.mhcable.com/~chuckh
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iQCVAwUBQML2DzVdG8M9x9tGAQL+eAP/R/40de+cdIq521YRapEQzBIGP0Bc0BhP
u0eyEP2d/YkDBoVnsmfjiK+z3ai01NBkMl1Kn7UE4/bXmqGdPh9ZRRTtY++cu7oZ
UQIAU5WnB+WjAhoGMcOrFpk07E6TJSrK3i41rIGPncexrrtA8dWJ3cf2m1cWkRyq
cg5vlDRJQz0=
=XxJK
-----END PGP SIGNATURE-----

Re: ssh and routers

[Thomas Stivers]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Jun 06 2004  6:46 AM, Chuck Hallenbeck wrote:
> Are there router configuration options that can restore my access
> to his system? What should be changed to let me access him again?
> The router is a Linksys something or other.

In the router configuration system there should be a place where you can
forward ports on the external interface (the one hooked to the modem) to
the internal interface to which the linux computer is attached. The port
you want to forward is 22. Also most routers have an option which lets
you use a computer on your network as a dmz. This means that all the
ports that are not specifically forwarded elsewhere will go there. If
you choose this your friend will want to be sure he has a firewall
running on the linux box as it will be reachable by the internet. 

HTH

- -- 
"Debugging is twice as hard as writing the code in the first place.
Therefore, if you write the code as cleverly as possible, you are,
by definition, not smart enough to debug it." - Brian W. Kernighan

Thomas Stivers	e-mail: stivers_t@tomass.dyndns.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAwwJ05JK61UXLur0RAtWNAJ0fL6IOAyv92D2mrLPgi2LJ4sAX3gCfVq7G
VoILexEoMVCkm3AQMgHr+QM=
=wSp+
-----END PGP SIGNATURE-----

Re: ssh and routers

[Chuck Hallenbeck]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thanks, Thomas, that gives me a good starting place.




- -- 
The Moon is Waning Gibbous (84% of Full)
My home page is now at http://www.mhcable.com/~chuckh
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iQCVAwUBQMMQPDVdG8M9x9tGAQJeFgP+MvpdYnNsKMrTNODYgptKB00gkPZv7wZJ
GnZuXb19IjLdCPe2MAf0HliG+ptjc+laC4T8kR/7ftKTw7fkM51123k8/UUAAYwJ
J9YzbK/6kioyVjS30+6YBwRrY7G5JfVJSEtxF1t9cVZ7O8mg1UGY5SdSgllIU4m9
jWQn3mXHXWE=
=/DSX
-----END PGP SIGNATURE-----

Re: ssh and routers

[Effortless Union with the Divine]

Yup. At least on this linksys, go to setup, then advanced, then port 
forwarding. Then you'll see a form you have to fill out, first goes the 
service name, put ssh. Next come the range of ports, put 22 for both of 
those, in other words it will forward from port 22 to port 22. Check the 
boxes for the protocols, two of them, and the one to make it active. 
Also, it will have another edit box to enter the IP address of the 
user's local machine. They will have to assign it a fixed IP to make 
this work. Hope this helps.

-- 
Currently playing: Dogon - Unit 33 Smokes A Beedee
Good Vibes Radio: http://clearwhitelight.org/goodvibes

Omeron - Effortless Union with the Divine

"This quest may be attempted by the weak with as much  hope as the 
strong. Yet such is oft the course of  deeds that move the wheels of the 
world: small hands do  them because they must, while the eyes of the 
great are  elsewhere." - J.R.R. Tolkien

Re: ssh and routers

[Igor Gueths]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Chuck, yes there is. He can dmz his machine using the Linksys router by first loggin into his router. Then he has to go to the advanced link, dmz host, and then in the edit box he types in the 
last 3 digits of his internal ip address to dmz the box. Then go to apply. All done. 
On Sun, Jun 06, 2004 at 06:46:30AM -0400, Chuck Hallenbeck wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> I have a question which is probably elementary, but I am a
> network ninny, and it puzzles me.
> 
> I have been ssh'ing  into several other folks computers to assist
> with stuff from time to time. One of them recently added a router
> to his configuration and I am now unable to reach his machine. He
> formerly had a cable modem going direct to his ethernet card, and
> now that modem goes to his router, and from there two cables
> emerge, one to his ethernet card and the other to the family
> Windows machine.
> 
> Are there router configuration options that can restore my access
> to his system? What should be changed to let me access him again?
> The router is a Linksys something or other.
> 
> Thanks
> 
> Chuck
> 
> 
> - -- 
> The Moon is Waning Gibbous (85% of Full)
> My home page is now at http://www.mhcable.com/~chuckh
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (GNU/Linux)
> 
> iQCVAwUBQML2DzVdG8M9x9tGAQL+eAP/R/40de+cdIq521YRapEQzBIGP0Bc0BhP
> u0eyEP2d/YkDBoVnsmfjiK+z3ai01NBkMl1Kn7UE4/bXmqGdPh9ZRRTtY++cu7oZ
> UQIAU5WnB+WjAhoGMcOrFpk07E6TJSrK3i41rIGPncexrrtA8dWJ3cf2m1cWkRyq
> cg5vlDRJQz0=
> =XxJK
> -----END PGP SIGNATURE-----
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

- -- 
Failure is not an option, it comes bundled with your Microsoft product.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFAwzvFNohoaf1zXJMRArx+AJ9fZCqpF0NaTmSOSs/QVC8r/bkByACfY1ez
QmNdfidnZMCNJklEZJHgKFc=
=Ue87
-----END PGP SIGNATURE-----

Re: ssh and routers

[Janina Sajka]

Don't you want to forward by specific ports instead of all ports?

Not that Linux isn't perfectly capable of firewalling--it is. But, why ask for more than you need?

Igor Gueths writes:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Chuck, yes there is. He can dmz his machine using the Linksys router by first loggin into his router. Then he has to go to the advanced link, dmz host, and then in the edit box he types in the 
> last 3 digits of his internal ip address to dmz the box. Then go to apply. All done. 
> On Sun, Jun 06, 2004 at 06:46:30AM -0400, Chuck Hallenbeck wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > I have a question which is probably elementary, but I am a
> > network ninny, and it puzzles me.
> > 
> > I have been ssh'ing  into several other folks computers to assist
> > with stuff from time to time. One of them recently added a router
> > to his configuration and I am now unable to reach his machine. He
> > formerly had a cable modem going direct to his ethernet card, and
> > now that modem goes to his router, and from there two cables
> > emerge, one to his ethernet card and the other to the family
> > Windows machine.
> > 
> > Are there router configuration options that can restore my access
> > to his system? What should be changed to let me access him again?
> > The router is a Linksys something or other.
> > 
> > Thanks
> > 
> > Chuck
> > 
> > 
> > - -- 
> > The Moon is Waning Gibbous (85% of Full)
> > My home page is now at http://www.mhcable.com/~chuckh
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.4 (GNU/Linux)
> > 
> > iQCVAwUBQML2DzVdG8M9x9tGAQL+eAP/R/40de+cdIq521YRapEQzBIGP0Bc0BhP
> > u0eyEP2d/YkDBoVnsmfjiK+z3ai01NBkMl1Kn7UE4/bXmqGdPh9ZRRTtY++cu7oZ
> > UQIAU5WnB+WjAhoGMcOrFpk07E6TJSrK3i41rIGPncexrrtA8dWJ3cf2m1cWkRyq
> > cg5vlDRJQz0=
> > =XxJK
> > -----END PGP SIGNATURE-----
> > 
> > 
> > _______________________________________________
> > Speakup mailing list
> > Speakup@braille.uwo.ca
> > http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 
> - -- 
> Failure is not an option, it comes bundled with your Microsoft product.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (GNU/Linux)
> 
> iD8DBQFAwzvFNohoaf1zXJMRArx+AJ9fZCqpF0NaTmSOSs/QVC8r/bkByACfY1ez
> QmNdfidnZMCNJklEZJHgKFc=
> =Ue87
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

-- 
	
				Janina Sajka, Director
				Technology Research and Development
				Governmental Relations Group
				American Foundation for the Blind (AFB)

		Chair, Accessibility Workgroup
	Free Standards Group (FSG)

Email: janina@afb.net		Phone: (202) 408-8175

Re: ssh and routers

[Chuck Hallenbeck]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thanks folks. Sounds do-able. I wish I had a router here to play
with, but I only have a firewall script on my own system. I will
have to talk my friend through the configuration of his linksys
by telephone.


- -- 
The Moon is Waning Gibbous (83% of Full)
My home page is now at http://www.mhcable.com/~chuckh
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iQCVAwUBQMNCgzVdG8M9x9tGAQKYPQQA142WRXiQgQanMa7Krro9snnJ0RBDXorA
taaRXXi+Gpvu7kY+UVqs+eqDXM/bfi5PtStnByvm3BshKVFVQOtmXa7fOhlci7Bo
K2XpeWcDcegjBZdp9v1Bg9IVK1ixNAYzyProNtmZ0xmYPTTtZT2LNjH0/WExSbb3
4/s1xQ4wzJ0=
=y08P
-----END PGP SIGNATURE-----

Re: ssh and routers

[Igor Gueths]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Another interesting read is the Linksys Howto on tldp.org.
On Sun, Jun 06, 2004 at 12:12:42PM -0400, Chuck Hallenbeck wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Thanks folks. Sounds do-able. I wish I had a router here to play
> with, but I only have a firewall script on my own system. I will
> have to talk my friend through the configuration of his linksys
> by telephone.
> 
> 
> - -- 
> The Moon is Waning Gibbous (83% of Full)
> My home page is now at http://www.mhcable.com/~chuckh
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (GNU/Linux)
> 
> iQCVAwUBQMNCgzVdG8M9x9tGAQKYPQQA142WRXiQgQanMa7Krro9snnJ0RBDXorA
> taaRXXi+Gpvu7kY+UVqs+eqDXM/bfi5PtStnByvm3BshKVFVQOtmXa7fOhlci7Bo
> K2XpeWcDcegjBZdp9v1Bg9IVK1ixNAYzyProNtmZ0xmYPTTtZT2LNjH0/WExSbb3
> 4/s1xQ4wzJ0=
> =y08P
> -----END PGP SIGNATURE-----
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

- -- 
Failure is not an option, it comes bundled with your Microsoft product.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFAw0LqNohoaf1zXJMRAvoGAJ9x0F2jZyZHbT0RecmXfTm1k7VGwwCgq6gB
jTuAqkMhUQvn3vJ/RVdmNWk=
=GTqK
-----END PGP SIGNATURE-----

Re: ssh and routers

[Gregory Nowak]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I personally like the idea of a software firewall on my GNU/linux box,
rather then a hardware router.

Greg


On Sun, Jun 06, 2004 at 12:12:42PM -0400, Chuck Hallenbeck wrote:
> Thanks folks. Sounds do-able. I wish I had a router here to play
> with, but I only have a firewall script on my own system. I will
> have to talk my friend through the configuration of his linksys
> by telephone.
> 
> 
> -- 
> The Moon is Waning Gibbous (83% of Full)
> My home page is now at http://www.mhcable.com/~chuckh
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 
> 
> !DSPAM:40c3429628444580416515!
> 
> 

- -- 
Free domains: http://www.eu.org/ or mail dns-manager@EU.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFAw1JB7s9z/XlyUyARAuwbAJ9BKEmR4tJMDXQMjCOkCGaTdDsPBgCeIzPH
+AZofBr4tsrpjWJbaFutD5A=
=j0SN
-----END PGP SIGNATURE-----

Re: ssh and routers

[Janina Sajka]

On som routers you can specify an external address that will accept connections for editing the router's configuration. That's the case on my SMC Barricade. In the case of the Barricade, diting is via browser connection to port 88.

Gregory Nowak writes:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> I personally like the idea of a software firewall on my GNU/linux box,
> rather then a hardware router.
> 
> Greg
> 
> 
> On Sun, Jun 06, 2004 at 12:12:42PM -0400, Chuck Hallenbeck wrote:
> > Thanks folks. Sounds do-able. I wish I had a router here to play
> > with, but I only have a firewall script on my own system. I will
> > have to talk my friend through the configuration of his linksys
> > by telephone.
> > 
> > 
> > -- 
> > The Moon is Waning Gibbous (83% of Full)
> > My home page is now at http://www.mhcable.com/~chuckh
> > 
> > 
> > _______________________________________________
> > Speakup mailing list
> > Speakup@braille.uwo.ca
> > http://speech.braille.uwo.ca/mailman/listinfo/speakup
> > 
> > 
> > !DSPAM:40c3429628444580416515!
> > 
> > 
> 
> - -- 
> Free domains: http://www.eu.org/ or mail dns-manager@EU.org
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (GNU/Linux)
> 
> iD8DBQFAw1JB7s9z/XlyUyARAuwbAJ9BKEmR4tJMDXQMjCOkCGaTdDsPBgCeIzPH
> +AZofBr4tsrpjWJbaFutD5A=
> =j0SN
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

-- 
	
				Janina Sajka, Director
				Technology Research and Development
				Governmental Relations Group
				American Foundation for the Blind (AFB)

		Chair, Accessibility Workgroup
	Free Standards Group (FSG)

Email: janina@afb.net		Phone: (202) 408-8175

Re: ssh and routers

[William F. Acker WB2FLW +1-303-722-7209]

Probably, to avoid screwing with the *!&#% router configuration more than 
once.  Of course, the ideal solution is a range of public static IP 
addresses so you don't have to copulate with all that port forwarding 
krapp!
-- 

Bill in Denver

On Sun, 6 Jun 2004, Janina Sajka wrote:

> Don't you want to forward by specific ports instead of all ports?
> 
> Not that Linux isn't perfectly capable of firewalling--it is. But, why ask for more than you need?
> 
> Igor Gueths writes:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > Chuck, yes there is. He can dmz his machine using the Linksys router by first loggin into his router. Then he has to go to the advanced link, dmz host, and then in the edit box he types in the 
> > last 3 digits of his internal ip address to dmz the box. Then go to apply. All done. 
> > On Sun, Jun 06, 2004 at 06:46:30AM -0400, Chuck Hallenbeck wrote:
> > > -----BEGIN PGP SIGNED MESSAGE-----
> > > Hash: SHA1
> > > 
> > > I have a question which is probably elementary, but I am a
> > > network ninny, and it puzzles me.
> > > 
> > > I have been ssh'ing  into several other folks computers to assist
> > > with stuff from time to time. One of them recently added a router
> > > to his configuration and I am now unable to reach his machine. He
> > > formerly had a cable modem going direct to his ethernet card, and
> > > now that modem goes to his router, and from there two cables
> > > emerge, one to his ethernet card and the other to the family
> > > Windows machine.
> > > 
> > > Are there router configuration options that can restore my access
> > > to his system? What should be changed to let me access him again?
> > > The router is a Linksys something or other.
> > > 
> > > Thanks
> > > 
> > > Chuck
> > > 
> > > 
> > > - -- 
> > > The Moon is Waning Gibbous (85% of Full)
> > > My home page is now at http://www.mhcable.com/~chuckh
> > > -----BEGIN PGP SIGNATURE-----
> > > Version: GnuPG v1.2.4 (GNU/Linux)
> > > 
> > > iQCVAwUBQML2DzVdG8M9x9tGAQL+eAP/R/40de+cdIq521YRapEQzBIGP0Bc0BhP
> > > u0eyEP2d/YkDBoVnsmfjiK+z3ai01NBkMl1Kn7UE4/bXmqGdPh9ZRRTtY++cu7oZ
> > > UQIAU5WnB+WjAhoGMcOrFpk07E6TJSrK3i41rIGPncexrrtA8dWJ3cf2m1cWkRyq
> > > cg5vlDRJQz0=
> > > =XxJK
> > > -----END PGP SIGNATURE-----
> > > 
> > > 
> > > _______________________________________________
> > > Speakup mailing list
> > > Speakup@braille.uwo.ca
> > > http://speech.braille.uwo.ca/mailman/listinfo/speakup
> > 
> > - -- 
> > Failure is not an option, it comes bundled with your Microsoft product.
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.3 (GNU/Linux)
> > 
> > iD8DBQFAwzvFNohoaf1zXJMRArx+AJ9fZCqpF0NaTmSOSs/QVC8r/bkByACfY1ez
> > QmNdfidnZMCNJklEZJHgKFc=
> > =Ue87
> > -----END PGP SIGNATURE-----
> > 
> > _______________________________________________
> > Speakup mailing list
> > Speakup@braille.uwo.ca
> > http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 
> -- 
> 	
> 				Janina Sajka, Director
> 				Technology Research and Development
> 				Governmental Relations Group
> 				American Foundation for the Blind (AFB)
> 
> 		Chair, Accessibility Workgroup
> 	Free Standards Group (FSG)
> 
> Email: janina@afb.net		Phone: (202) 408-8175
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
>