Run SSH on different ports?

nickj6282 · 04-27-2007, 02:25 PM

Hi all,

I'm trying to figure out if there's a way to run SSH on different ports based on the IP address. I've got a linux box acting as my router. I want to be able to access SSH on the external interface via a different port than the internal interface, which will use standard port 22. Can anyone point me in the right direction?

Thanks,
-Nick

acid_kewpie · 04-27-2007, 02:47 PM

nothing to do with ssh really.. just use port forwarding to a different port within the router. anything that hits my adsl router on port 2222 goes through to an internal machine on 22.

nickj6282 · 04-27-2007, 06:11 PM

Ok, the linux box that this is on IS the router, so how would I go about forwarding a port from itself to itself?

This machine has an interface on the outside, we'll say it's 10.0.0.1, and another on the inside, 192.168.1.1

What I want is SSH listening on 10.0.0.1:1234 and 192.168.1.1:22. Is there a way to configure it like this?

Thanks,
-Nick

gilead · 04-27-2007, 08:01 PM

Have a look at man sshd_config. It sounds like you want the ListenAddress option. From the man page:

Code:

             Specifies the local addresses sshd(8) should listen on.  The following forms may be used:

                   ListenAddress host|IPv4_addr|IPv6_addr
                   ListenAddress host|IPv4_addr:port
                   ListenAddress [host|IPv6_addr]:port

             If port is not specified, sshd will listen on the address and all prior Port options specified.  The
             default is to listen on all local addresses.  Multiple ListenAddress options are permitted.  Addition-
             ally, any Port options must precede this option for non-port qualified addresses.

You'd have:

Code:

ListenAddress 10.0.0.1:1234
ListenAddress 192.168.1.1:22

hollywoodb · 04-28-2007, 11:56 AM

On my setup:

Router
-> Laptop (sshd listening on port X)
-> Desktop (sshd listening on port Y)

I have the router set to forward port X to the laptop and port Y to the desktop. Then when I ssh from some remote location I can pick my machine by port.

In /etc/ssh/sshd_config you can set the "Port" line without messing with the ListenAddress or anything fancy.