Date: Tue, 23 Jan 2007 12:23:26 -0600 From: "Isaac Grover" <isaac.grover@gmail.com> To: freebsd-pf@freebsd.org Subject: Incoming ssh doesn't quite work Message-ID: <bf7af5e50701231023mfec28f9q24ff7c37b1640f13@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Good afternoon, I have a FreeBSD 6.1 box providing authentication services for a local wireless hotspot. "ext_if" (xl2) connects to the DSL modem, "wireless_if" (xl1) connects to the wireless router. Outbound http and https work just fine, but outbound ssh and inbound ssh don't work at all. Port forwarding on the DSL modem has been enabled, and I can see the inbound SSH requests on ext_if, sshd is actively listening on the required port, but the sshd logs say about connection attempts. Is there something else that needs to be configured in pf.conf for inbound ssh to function correctly? ---8<--- ext_if="xl2" ext_addr="172.16.1.33" wireless_if="xl1" wireless_net="192.168.100.0/24" proxy_addr="192.168.100.1" nat on $ext_if from $wireless_net to any port { 22, 443 } -> $ext_if rdr on $wireless_if inet proto tcp from any to any port 80 -> $proxy_addr port 3080 rdr on $ext_if proto tcp from any to $ext_if port { 22, 80 } -> ($ext_if) pass in on $wireless_if inet proto tcp from $wireless_net to any port { 22, 25, 110, 443, 3080 } keep state pass in on $ext_if inet proto tcp from any to $ext_addr port { 22, 80 } flags S/SA synproxy state pass out on $wireless_if inet proto tcp from $wireless_net to any port { 22, 25, 110, 443, 3080 } keep state pass out on $ext_if inet proto tcp from any to any port { 22, 80 } flags S/SA synproxy state ---8<--- Thank you, -- Isaac Grover, Owner Quality Computer Services of River Falls, Wisconsin Affordable I. T. Consulting, Web Design, and Web Hosting. Commercial and Residential Inquiries Welcomed. Web: http://www.qcs-rf.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bf7af5e50701231023mfec28f9q24ff7c37b1640f13>