[ILUG] Smoothwall and external access via ssh or Https.

[Dermot Daly]

Yes, but its typical to change the _Default_ ports for firewalls.  Ssh
access should still be possible to your smoothwall by supplying the port
(with the -p switch)
Try 
ssh -p 222 <your external ip> -l <user>

Similarly for web access try https://<your external ip>:441/

Dermot.
-----Original Message-----
From: John Allen [mailto:john.allen at orbiscom.com] 
Sent: 09 March 2004 10:26
To: ilug at linux.ie
Subject: Re: [ILUG] Smoothwall and external access via ssh or Https.


On Tuesday 09 March 2004 10:14, Jason Corcoran wrote:
> I have set up a smoothwall ( with Fix 1 and 2 installed) machine to 
> act as a firewall on our cable internet connection.
>
> I am trying (in vain ) to set up remote access via ssh or https. I 
> have set the ports in the external services to (ssh)222 and (https) 
> 441, I can access the services via the external ip from the lan (via 
> the "Green" card) but not from a machine on a different network.
>

ssh is port 22, not 222
hhtps is 443, not 441

> When I nmap the ports I get the following information.
>
>
> Starting nmap V. 3.00 ( www.insecure.org/nmap )
> Warning:  OS detection will be MUCH less reliable because we did not 
> find at least 1 open and 1 closed TCP port Interesting ports on  
> (194.1**.**.**):
> Port       State       Service
> 81/tcp     filtered    hosts2-ns
> 222/tcp    filtered    rsh-spx
> 441/tcp    filtered    decvms-sysmgt
> Too many fingerprints match this host for me to give an accurate OS 
> guess Nmap run completed -- 1 IP address (1 host up) scanned in 22 
> seconds
>
>
> Dose the filtered mean that it will accept only certain ip's, cause I 
> left the ip part blank. I mailed the smoothwall list and they told me 
> to RTFM but I have configured the box as the manual says.
>
> Any pointers??
>
> Jason.
> --
> ________________________________________
> Senior Software Engineer,
> Activant Solutions Ltd.
> Longford Ireland.
>
> Email : Jason.Corcoran at Activant.com
> Aim   : JasonCorcoran9
> Http  : http://www.activant.com
> Phone : + 353 (0) 43 49202

-- 
John Allen,                          mailto:john.allen at orbiscom.com
Orbiscom Ireland Ltd,                Web:    http://www.orbiscom.com/
Orbiscom House,                      Direct: +353-1-2178610
3 Arkle Road,                        Office: +353-1-2945111
Sandyford Ind Est,                   Fax:    +353-1-2945119
Dublin 18,
Ireland.

MandrakeClub Silver Member.          http://www.dublinux.net

Mandrake Linux release 10.0 (RC1) for i586, kernel 2.4.22-21mdk
10:25:39 up 31 days, 18:15,  1 user,  load average: 0.05, 0.03, 0.05


Disclaimer: The information contained in this message is confidential
and is intended for the addressee(s) only.  If you have received this
message in error or there are any problems please notify the originator
immediately.  The unauthorised use disclosure copying or alteration of
this message is strictly forbidden. This message and any attachments
have been scanned for viruses. Orbiscom Ltd. will not be liable for
direct special indirect or consequential damages arising from alteration
of the contents of this message by a third party or as a result of any
virus being passed on. www.orbiscom.com

-- 
Irish Linux Users' Group http://www.linux.ie/mailman/listinfo/ilug/