I have an Ubuntu firewall box (Alma), at the office, with a web server on it. It looks like this:
[Internet] <-> [DSL Router] <-> [Alma] | [DMZ:10.1...] <--+--> [Internal LAN:192...]
Whenever I am at home, outside of Alma, I can get to it just fine through SSH. When I am inside, on the internal LAN I cannot use the public IP address to log in to the box, but instead must use the local subnet 192... Alma has 3 NIC interfaces.
I'd like to be able to script some things using a single public IP address. Let's say it is 188.8.131.52. This problem prevents doing that easily. Is there a way to make this command:
work from inside on the 192 subnet as well as the internet? The odd thing is that I can ping 184.108.40.206 from inside or outside just fine. But when I try to SSH to 220.127.116.11 from inside, the connection is refused.
What am I doing wrong, or not doing correctly?
My SSH daemon listens on 0.0.0.0. The firewall logs no attempt at all when I try from inside.
Any help is appreciated.