how to halt a system with private ip from a system in other net work

seabark99 · 03-18-2005, 10:58 AM

I am using redHat linux and also telnet service id is on. Also connected to internet.I know my private ip and router ip.can i halt my system from other network?

win32sux · 03-18-2005, 11:18 AM

you just need to do a simple port forwarding...

but don't use telnet through a public network (everything, including your password is transmitted in clear text)... use SSH instead...

for ssh you'd need to forward port 22 to the machine on the LAN... for telnet i think it's 23...

seabark99 · 03-20-2005, 12:59 AM

can expalin what is SSH and how to solve my question?

win32sux · 03-20-2005, 08:36 AM

this is ssh:

http://www.openssh.org/

it's included with pretty much every gnu/linux distro on the planet...

as for the port-forwarding, take a look at this diagram:

<LAN-1 PC-1>-<ROUTER-1>-<[INTERNET]>-<ROUTER-2>-<LAN-2 PC-2>

ssh uses tcp port 22... if you are on <LAN-1 PC-1> and you want to have ssh access to <LAN-2 PC-2>, you will need to do port-forwarding of tcp port 22 on <ROUTER-2> to <LAN-2 PC-2>... this means that you are basically telling <ROUTER-2> the following:

"any tcp packets that hit <ROUTER-2> at port 22 on the internet side should be forwarded to <LAN-2 PC-2>..."

so when you are on <LAN-1 PC-1> and you try to connect to <ROUTER-2> at tcp port 22, you will in fact be connecting to <LAN-2 PC-2>...

if <ROUTER-2> is a linux router using iptables with eth0 as the external interface and eth1 as the internal one, and <LAN-2 PC-2> has an ip address of 192.168.0.102, then the port forwarding can be done using these two example rules on <ROUTER-2>:

Code:

iptables -t nat -A PREROUTING -p TCP -i eth0 --dport 22 \
-j DNAT --to-destination 192.168.0.102
iptables -A FORWARD -p TCP -i eth0 -o eth1 --dport 22 -j ACCEPT

so from anywhere you were accross the internet, you could now establish an ssh connection with <LAN-2 PC-2> by trying to connect to <ROUTER-2>'s ip address or dns name...

here's a wiki explaining what port forwarding is:

http://en.wikipedia.org/wiki/Port_forwarding

once you login to <LAN-2 PC-2> via ssh, you can turn it off with the command "halt"...