LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   New firewall: ssh on port 80 not working anymore... (https://www.linuxquestions.org/questions/linux-security-4/new-firewall-ssh-on-port-80-not-working-anymore-240203/)

norbi99 10-08-2004 08:56 AM

New firewall: ssh on port 80 not working anymore...
 
I used to ssh to my linux box over port 80 and life was great… A couple of days ago corporate HQ updated their firewall and since then I can not connect anymore. I tried ports 80, 443, 21 (these are the only ones open to my firewall ID), but none of them work. Weird thing is that sometimes I can connect, for a couple of seconds, 1 minute max, then I get disconnected…
Some examples from the log on the linux box:
-the case when I get connected and then disconnected :
sshd[1599]: fatal: Read from socket failed: Connection reset by peer
- the case when I can not connect at all:
sshd[1826]: fatal: Timeout before authentication for x.x.x.x



I am not sure whan firewall corporate HQ has set up, all I know is that I use Firewall-1 Authentication Agent 4.1 (by Checkpoint Software) to log in and get access to the internet.

Any ideas?

Thanks
N.

Krugger 10-08-2004 11:21 AM

Maybe the firewall got smarter and expects usual HTTP traffic on that port. Maybe setting the sshd at 40000 would go through or at its port of 22.

norbi99 10-08-2004 03:42 PM

I've tried port 22 already and its not working.... I will try port 40000 but I suspect that wont work as well...
Can a firewall filter port 80 only for http trafic? That means port 21 must be filtered for ftp traffic only as well?

Capt_Caveman 10-09-2004 01:38 AM

If it's an application level firewall or does proxying, then simply running a service over a certain port often won't work.

Something like http-tunnel might help.

http://www.nocrew.org/software/httptunnel.html

norbi99 10-09-2004 09:14 AM

Thanks a lot for the link. I works like a charm. I think the connection is a bit slower then it used to be (I use VNC to connect to my windows desktop), but I can live with it.


thanks again.


All times are GMT -5. The time now is 05:42 PM.