1
vote
2answers
47 views

Reject ssh connections made from proxies

I was seeing this question which was concerned with blocking access to the users who do not belong to a particular region. I am sure that blocking is possible but I see there is a workaround to this. ...
0
votes
0answers
35 views

Unable to SSH into Puppy Linux, even though SSHD is running

I installed OpenSSH client and server on my Puppy Linux computer. That computer is behind a router. I tried to ssh into it over the internet (outside the router) but it times out. Also doesn't work if ...
5
votes
1answer
156 views

delay to get password prompt when ssh'ing to a public server

i have a server (debian 7) setup in my university with public ip. when I ssh into the system (from outside the campus), I get a weird delay of 5-10 seconds before I get the password prompt. Why is ...
1
vote
1answer
820 views

How to Block SSH Brute Force via Iptables and How does it work?

I'm planning to add the following rules to iptables to stop ssh brute force attack which are common these days. -A INPUT -i eth0.103 -p tcp -m tcp --dport 4522 -m state --state NEW -m recent --set ...
3
votes
1answer
400 views

Rsync over ssh tunnel - using gateway server

Environment: ---------- ---------- /| ------------ | Work | | Gateway| | | | cluster | |Station |--------------------------------| ...
1
vote
1answer
45 views

Reach service on VM with private address

I have this configuration: source: https://www.lucidchart.com/publicSegments/view/5256a1e5-afb0-4c7a-96fa-35750a00527d/image.png Basically, I have to reach a service which is running on the virtual ...
2
votes
3answers
1k views

what is the required ports to be opened on the firewall?

Currently I'll be installing one AIX server behind a firewall, I just asked to open port 443 to use the SSH protocol to access this UNIX server. I already changed the default ssh port to be 443 ...
0
votes
1answer
143 views

Iptable rule to ssh over the internet

I've a server abc.example.com and a remote desktop zzz.example.com. I'm using SSH over a custom port, say, 6789. Whenever my firewall is off, I'm able to connect to the server successfully. But, as ...
1
vote
1answer
187 views

Possible sftp connection behind a router that is impossible to open any public ports except some standart ports like http?

I want to ask about the problem that I have with my office computer. I cannot reach the router so I cannot redirect any incoming requests to my PC. I have to get a huge file from another computer on ...
4
votes
1answer
587 views

How to “jail” a user account's network capabilities on Linux?

Linux box a is connected to a home DSL line with dynamic DNS registration, hosting a tmux session to which multiple clients connect in read-only mode over SSH. All users connect using the same ...
39
votes
4answers
22k views

How does reverse SSH tunneling work?

As I understand this, firewalls (assuming default settings) deny all incoming traffic that has no prior corresponding outgoing traffic. Based on Reversing an ssh connection and SSH Tunneling Made ...
4
votes
1answer
3k views

How to configure pfsense to NAT servers?

How can I configure pfsense so it will NAT servers so they can be accessed outside of the company? I tried to play around with the NAT settings, but didn't get anywhere. I want to be able to access ...
3
votes
2answers
785 views

How to Add rules to IP Filter (Firewall in SCO)

I need to add a rule (allow any to any port 22) to my firewall, so that I can ssh remotely into my machine. I have had a look in the SCO OSR600 Documentation and I cannot find anything in there that ...
2
votes
1answer
452 views

UFW Limit does not appear to work

I have my ssh port changed to XXX. Then I did ufw limit XXX/tcp However, when I try to login, after 5/6 failed attempts I get thrown back to prompt, but I can try again. Is that supposed to be the ...
3
votes
2answers
2k views

How to limit number off ssh login attempts per time interval

I am trying to limit number of ssh login attempts per time period. How might I do that? I have something like (in shorewall's rules) #ACTION SOURCE DEST PROTO DEST ...
5
votes
4answers
8k views

Set some firewall ports to only accept local network connections?

Basic firewall question: How do I set up the firewall on a system in a LAN so that some ports are only open to connections from the local area network, and not from the outside world? For instance, ...
6
votes
2answers
570 views

Configuring a vncserver so it's only accessible from my ssh tunnel

Since I use vnc through an ssh tunnel, is there any way I can block the open vnc port that the remote machine is listening on without it affecting my ability to use the ssh tunnel? Both machines are ...
4
votes
3answers
642 views

tunneling VNC/rdesktop over ssh

I'm having a friend behind a firewall, with a windows computer. I'm having a Linux machine at home which is not behind a firewall. I want to have an rdesktop connection to his machine, without using ...