Support Requests item #606429, was opened at 2002-09-08 13:16
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=213751&aid=606429&group_id=13751
Category: Release/Branch: Bering
Group: None
>Status: Closed
Priority: 5
Submitted By: Tom Harr Jakobsen (harjakob)
>Assigned to: Matt Schalit (rogermatt)
Summary: Problems whit SSH and FTP, using Bering
Initial Comment:
I have a router whith Bering, and now I try to get access
to it throug SSH - but I do experience some problems -I
can' t get through the Shorewall with FTP either - I
follow the installation guide, and the Users guide, but it
don't seem to work anyway - are ther any known issues
around this?
----------------------------------------------------------------------
>Comment By: Matt Schalit (rogermatt)
Date: 2002-09-21 17:26
Message:
Logged In: YES
user_id=144016
Roger that. Sorry if it took a while, but you can usually get
more speedy help via the leaf-user mailing list. Enjoy, matt.
----------------------------------------------------------------------
Comment By: Tom Harr Jakobsen (harjakob)
Date: 2002-09-21 03:46
Message:
Logged In: YES
user_id=607432
thanx - that worked!!!
----------------------------------------------------------------------
Comment By: Matt Schalit (rogermatt)
Date: 2002-09-20 12:17
Message:
Logged In: YES
user_id=144016
1. Check that sshd is running on the LEAF box, using the
command ps from
the command line. You should see something like
15392 root 4344 R /usr/sbin/sshd
If sshd is not running, then type at the # prompt:
# /usr/sbin/sshd
If it returns to a command prompt with no messages,
you're set.
If it dies with an error like special user not found,
read the docs that
jnilo has in his sections for sshd.
2. vi /etc/shorewall/rules and add lines like these above
the LAST LINE.
# Accept DNS connections from the firewall to the network
ACCEPT fw net tcp 53
ACCEPT fw net udp 53
# Accept SSH connections from the local network for
administration
ACCEPT loc fw tcp 22
# Accept DNS queries from local network to the firewall
(dnscache/tinydns)
ACCEPT loc fw tcp 53
ACCEPT loc fw udp 53
# Accept Web queries from local network to firewall (weblet)
ACCEPT loc fw tcp 80
Either the process wasnt' running, or you were blocked.
If you were blocked it would show up in your syslog.
It should work now. Let us know so we can close this
or get you some more help :)
Matthew
----------------------------------------------------------------------
Comment By: Manfred Schuler (mschuler)
Date: 2002-09-09 18:25
Message:
Logged In: YES
user_id=490757
It seems that sshd is not running.
sshd is not enabled in inetd.conf and the file /etc/init.d/sshd
contains this lines:
#Comment out and edit /etc/inetd.conf to run as a stand alone server
echo "Secure Shell server via inetd: sshd"
exit 0
So sshd is not started. You have to decide, if you start sshd by inetd
or by initscript.
When started by inted, connecting to LEAF takes more time, because the
session key must be generated by sshd before connecting.
Starting by initscript consumes some memory, because sshd is always running,
even when you are not logged in.
You must either comment the echo and exit line in /etc/init.d/sshd
or uncomment the #ssh line in /etc/inetd.conf.
Manfred
----------------------------------------------------------------------
Comment By: Tom Harr Jakobsen (harjakob)
Date: 2002-09-09 09:41
Message:
Logged In: YES
user_id=607432
I'm only trying to connect using ssh from a local machine on
the network, using Putty...I only recive "connection refused"
----------------------------------------------------------------------
Comment By: Jacques Nilo (jnilo)
Date: 2002-09-09 05:22
Message:
Logged In: YES
user_id=150195
Aren't you trying to ssh of ftp from the outside network by any
chance ? If so you need to adjust Shorewall rules file
and /etc/hosts.allow
If not more info about the type of error you get would help...
----------------------------------------------------------------------
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=213751&aid=606429&group_id=13751
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
