I also suggest to enforce public key authentication and disable password authentication for the internet access: PasswordAuthentication no The file /etc/ssh/nfig can be a copy of your usual sshd configuration.Įnsure that the following statements are configured: Port 12345 The xinetd configuration is: service ssh-external Maybe a higher value will make it also a bit more unlikely that this port is scanned by a "quick port scan". You are free to change this to any available free port number on your system. In the following example I use the port 12345: The external sshd processes are controlled by xinetd and running in parallel to the internal sshd process. This has the benefit the I reduce the load produced generated by script kids who are scanning port 22 for "well known usernames". I use port 22 only for the intranet ssh access.įor access via internet I use a custom (unusual) port.
It gave me the connection refused message still. B = OpenSSH_6.0p1 Debian-4, OpenSSL 1.0.1c Ī has 12.04 Ubuntu, B is a Raspberry Pi with Raspbian.ĮDIT: Something that I forgot to put in: I did try switching the SSH config file (I found it is /etc/ssh/ssh_config) I uncommented (deleted the #) the line with Port and changed 22 to 26.A = OpenSSH_5.9p1 Debian-5ubuntu1, OpenSSL 1.0.1.Here's what I get when I try to SSH from A to B using the external IP and port 26: ssh: connect to host xx.xx.xxx.xx port 26: Connection refused. I have also forwarded port 26 to the internal IP of B (through the router), as I did with 22 for A. I have tried allowing port 26 through OUTPUT of iptables on A and INPUT of B, but that didn't seem to work.
However, I want to also forward port 26 to computer B, and SSH from outside the network by using the external IP for both, but specifying either port 22 or 26, to effectively select which computer to use.
I have forwarded port 22 of my router to the IP of computer A, so that all makes sense to me. Let's call them A and B.Ī can SSH to B in the following manner: ssh can SSH to A by doing the same, but the external IP must be used. I have two computers behind the same router.
0 kommentar(er)
