Results 1 to 4 of 4

Thread: SSH question

  1. #1
    Untangle Ninja Solignis's Avatar
    Join Date
    Jul 2008
    Location
    Hudson, Ohio, USA
    Posts
    1,697

    Default SSH question

    Forgive for posting what I am sure is already posted.

    If I want to enable SSH for my box but not expose it to the Internet how would I do this?

    I just want LAN SSH.
    “Most good programmers do programming not because they expect to get paid or get adulation by the public, but because it is fun to program.” - Linus Torvalds

  2. #2
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,510

    Default

    The easiest way?

    Packet Filter rule...

    Drop, source interface: External, Protocol TCP, Destination port: 22, destined local.

    Done.

    From there, use OpenVPN and SSH to the lan interface IP for remote SSH ability.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  3. #3
    Untangle Ninja Solignis's Avatar
    Join Date
    Jul 2008
    Location
    Hudson, Ohio, USA
    Posts
    1,697

    Default

    Ah very nice, thanks
    “Most good programmers do programming not because they expect to get paid or get adulation by the public, but because it is fun to program.” - Linus Torvalds

  4. #4
    Untangler
    Join Date
    Dec 2008
    Posts
    53

    Default

    Sweetness! I've always disabled the "Accept SSH traffic from all interfaces" rule and added a custom Pass rules in Packet Filter. I like this better.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2