Enabling SSH

[Mathiau]

Originally Posted by WebFooL

All access to Untangle it self is controlled by packet filters.

So go to Config->Networking->Advanced->Packet filter
Then add a new filter.

From Interface External
To Destination Local
Port 22
Block

I just did this, but it still allowed access, then i looked below and on the system Packet Filter Rules and there is a rule that is:

Accept SSH traffic from all interfaces

I turned off this rule,. but then even internal access doesn't work..

attaches is my packet filter rule, but with that in place i can still access SSH externally.. do i need to reboot the system?

[sky-knight]

The source interface External, Destination Local, Destination port 22, protocol TCP rule does indeed work. If that didn't prevent access to SSH from the external interface you either didn't put it in correctly, or you have a very broken Untangle server.

Quite literally every Untangle I have out there uses that rule...

[Mathiau]

weird, i am doing a scheduled reboot in about 10 mins, maybe see if that does it, it is set as in the screen shot shows.

this is a standard 7.2 clean install with an update to 7.3, didnt do any add-ons like ntop or anything (got tired of the problems is caused with updates)

perhaps this install has gone south, perhaps also explains my OpenVPN issues with it working on second and not the next (client)

[sky-knight]

Yeah, my install is nuked too.

[Mathiau]

reboot didn't do it, still shows open on port 22 with a GRC scan with that packet filter rule in place.

Is this a new issue with 7.3 or something, breaking installs after some time of usage, i would think the UT installer would do a verification that all items installed correctly before completing and letting you run it..

[sky-knight]

Or you've configured it wrong? Screen shot your block rule please.

[Mathiau]

screenshot is in above post

http://forums.untangle.com/networkin...tml#post108417

i tried it on reject and drop, i don't doubt it could be wrong, today seems to be a day full of blonde moements.

[sky-knight]

Drop = Stealth
Reject = Closed

And that rule will work... if it doesn't you have another packet filter rule in there somewhere that is messing with things. The user packet filter rules ALWAYS take priority over the system rules.

[Mathiau]

that is the only packet filter rule i have in the system

good to know about dropped and rejected!

[sky-knight]

Then something is wrong with your system, or the port scan isn't scanning Untangle.