Hi, all.

I have a Gentoo 2.6.16 box. It is connected to the internet through a Belkin router. The rputer assigns it the IP address 192.168.2.4 which is not a globally accessible IP address. So if I start an ssh daemon (or whatever network daemon), how do I make that accessible to the outside world?

Also, what should I be doing security-wise (besides blocking incoming connections other than the allowed ones) after I open up this daemon to the outside? I've read about port-knocking. It seems like a good solution, but I want my friends to be able to access this daemon with out too much trouble. I do plan to set up a chroot. Is there anything else that I should do?


Many thanks.

you need to use port forwarding, forward port 22 on your router to 192.168.2.4. so that way only 22 will be enabled and no other port is accesible. if you have a definite set of ips, just use /etc/hosts.allow file and add your friends to it.