[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: cannot ssh into my own machine



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday, 08.12.2004 at 00:58 -0500, Kamaraju Kusumanchi wrote:

> Running debian sid.
> 
> Let's say my machine's external IP is 69.212.23.215 and internel IP is
> 192.168.0.101. I am connected to the internet through DI-514 router. I
> do port forwarding to get ssh functionality.
> 
> 
> >From this machine (192.168.0.101), I can do
> ssh 192.168.0.101 -l username
> 
> I cannot do
> ssh 69.212.23.215 -l username
> 
> But from outside world, I can do
> ssh 69.212.23.215 -l username
> 
> Why am I not able to ssh into my own machine using the external IP
> address? Is this a limitation of Debian or the defect in the router or
> a configuration hiccup?

When you do 'ssh 69.212.23.215 -l username' locally, it is possible that
the port forwarding rules of your router are not triggered.

Normally, port forwarding of this type forwards from the external
interface of the router (the public interface) to the internal
interface.

In other words, the rule that the router is obeying is "When some
connection comes in on port 22 for IP 69.212.23.215 on the external
interface, forward it to 192.168.0.101 on the internal interface"

A connection from your local machine to 69.212.23.215 does NOT pass over
the external interface of your router, and so won't be matched by that
rule.  It will attempt to login to your router, in fact, via SSH - on
its internal (local) interface.

Whether you can change the router's behaviour depends on the router
itself.

Dave.
- -- 
Dave Ewart - davee@sungate.co.uk - jabber: davee@jabber.org
All email from me is now digitally signed, key from http://www.sungate.co.uk/
Fingerprint: AEC5 9360 0A35 7F66 66E9 82E4 9E10 6769 CD28 DA92

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBtwEWnhBnac0o2pIRAiozAJ9kamZcTGbA8vjFFjAHMtQ1rm5gMwCfeuu6
AZVepEMhmHkS36FYfsakDgU=
=jZPC
-----END PGP SIGNATURE-----



Reply to: