LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Mandriva
User Name
Password
Mandriva This Forum is for the discussion of Mandriva (Mandrake) Linux.

Notices


Reply
  Search this Thread
Old 12-21-2004, 01:28 AM   #1
surfduke
Member
 
Registered: Sep 2003
Location: Orange County, CA
Posts: 71

Rep: Reputation: 15
SSH won't connect from outside IP's


I am running mandrake 10.1. SSH from my XP box to my Mandrake server works fine. I connect to the internet with a qwest dsl gateway (GT701wg). I have port 22 forwarded to my server (192.168.1.104). Do you all think its is a router issue or does anyone know if Qwest blocks port 22? Any help would be appreciated.
 
Old 12-21-2004, 03:22 AM   #2
ernie
Senior Member
 
Registered: Nov 2001
Location: Toledo, Ohio - USA
Distribution: Mageia 1
Posts: 1,079
Blog Entries: 4

Rep: Reputation: 70
You will have to ask your ISP's Tech Support if port 22 is blocked.
 
Old 12-21-2004, 03:54 AM   #3
linuxles
Member
 
Registered: Mar 2004
Location: Austin, TX
Distribution: CentOS Fedora RHEL SLES Knoppix
Posts: 78

Rep: Reputation: 15
I doubt that Qwest is blocking port 22 traffic. Since the GT701wg has a built in firewall, log into
it and re-check that you have set it up correctly. You may try re-starting it to see if that helps.

Also, check your iptables with "iptables -L" (or the firewall tool) and verify that you don't have
some external ip's blocked from connecting.

Are you specifically allowing or denying any hosts w/hosts.allow and/or hosts.deny?

Is your Mandrake server still at 192.168.1.104, or has it moved to a different ip?

Not sure what Mandrakes defaults' are, but this'll give you some things to check...

/Les

Last edited by linuxles; 12-21-2004 at 03:57 AM.
 
Old 12-23-2004, 01:16 AM   #4
surfduke
Member
 
Registered: Sep 2003
Location: Orange County, CA
Posts: 71

Original Poster
Rep: Reputation: 15
Quote:
I doubt that Qwest is blocking port 22 traffic. Since the GT701wg has a built in firewall, log into
Your Right! I called Qwest and they confirmed that port 22 is NOT blocked.


Quote:
Also, check your iptables with "iptables -L" (or the firewall tool) and verify that you don't have
I tried "iptables -L" command and it was unrcognized by my server. So I am not sure how to go about what your saying here.

Quote:
Are you specifically allowing or denying any hosts w/hosts.allow and/or hosts.deny?
all Hosts are allowed.



Quote:
Is your Mandrake server still at 192.168.1.104, or has it moved to a different ip?
Yes indeed. All is good there. So I am not sure what the problem is. Is there a config file I can post that would help decipher the problem?

Thanks for responding, you guys rock!

Surfduke
 
Old 12-25-2004, 04:26 PM   #5
linuxles
Member
 
Registered: Mar 2004
Location: Austin, TX
Distribution: CentOS Fedora RHEL SLES Knoppix
Posts: 78

Rep: Reputation: 15
> I tried "iptables -L" command and it was unrcognized by my server. So I am not sure how to
> go about what your saying here.

"iptables -L" will only work as root. The full path is: /sbin/iptables. If "sbin" is not in your path,
then you'll have to type "/sbin/iptables -L"

You can check to see if it is installed with: "rpm -q iptables"

You can post the iptables output if you are unsure of what to look for...

The other way to list the iptables output (if the service is running): "service iptables status"

/Les
 
Old 12-26-2004, 08:43 AM   #6
surfduke
Member
 
Registered: Sep 2003
Location: Orange County, CA
Posts: 71

Original Poster
Rep: Reputation: 15
Thanks for the help Les... here's the output from the iptables -L command:

[root@localhost /]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
[root@localhost /]#


Not sure what it means but maybe someone can help.
 
Old 12-27-2004, 02:58 PM   #7
linuxles
Member
 
Registered: Mar 2004
Location: Austin, TX
Distribution: CentOS Fedora RHEL SLES Knoppix
Posts: 78

Rep: Reputation: 15
What this tells me is that you are not blocking a thing on your Linux box. It is wide open.
So the issue is definitely with your router. You may try resetting it, just turn it off for a
minute or so, and then back on and see if that helps. If it doesn't, then recheck your
settings on the router...

On my Linux box I block everything except for SSH (port 22). Here is my "iptables -L"
output. Actually I have a couple other tweaks in there too, but I won't include them, so
as not to confuse you...

# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain RH-Firewall-1-INPUT (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere icmp any
ACCEPT ipv6-crypt-- anywhere anywhere
ACCEPT ipv6-auth-- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited
#

Note this is on a box running Fedora Core 2. If you set up the firewall on Mandrake
it should look very similar (except for the references to RedHat). The general rule of
the firewall is that if it matches a rule then it gets passed on, otherwise it gets rejected.

/Les
 
Old 12-27-2004, 09:18 PM   #8
surfduke
Member
 
Registered: Sep 2003
Location: Orange County, CA
Posts: 71

Original Poster
Rep: Reputation: 15
Right now I am not too concerned with protecting the computer, I am more interested in being able to use GAIM and wondering why it won't connect. I'd like to use my linux desktop most of the time but with this issue unresolved I cannot spend to much time on my linux desktop.
 
Old 12-28-2004, 10:36 PM   #9
surfduke
Member
 
Registered: Sep 2003
Location: Orange County, CA
Posts: 71

Original Poster
Rep: Reputation: 15
I just tryed Kopete and it connects to servers fine...... why won't gaim? Kopete sucks compared to gaim.... no offence... but can anyone tell me why I cannot connect to gaim but I can kopete
?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
IPTables - Multiple Public IP's to private IP's matneyc Linux - Security 8 05-27-2005 12:23 PM
How do I block IP's to prevent unauthorized SSH login attempts? leofoxx Linux - Security 6 05-23-2005 09:36 PM
ssh connection refused for external IP's Pleonast Linux - Networking 2 11-08-2004 12:00 PM
How to lock out ip's that try to ssh by force mazzo Linux - Security 3 08-19-2004 02:28 PM
Allow SSH from specific IP's ONLY. m15a4 Linux - Security 3 12-29-2003 04:02 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Mandriva

All times are GMT -5. The time now is 02:18 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration