[ILUG] Eircom's netopia 2247NWG-VGx, external ssh and hopping my head off a brick wall

[Stephen Dunne]

On Wed, 2007-09-12 at 00:34 +0100, Timothy Murphy wrote:
> On Tue 11 Sep 2007, Stephen Dunne wrote:
> 
> > Now I also have sshd running on the lappie for obvious reasons, along
> > with a ssh sized hole in the router's firewall. This hole doesn't appear
> > to work :(
> ...
> > I'm assuming in all this that Eircom don't filter out port 22 further
> > upstream :(
> 
> I have an Eircom Netopia ADSL modem, but not the same model as yours.
> I opened a pinhole at port 22, and also allowed it in my firewall (shorewall),
> and I can ssh in without problem.

Pinholes are configured in advanced mode, yes ?? (Yep, according to the
v7 manual I found they are) I don't fancy trying to talk my Mum through
that without the correct manual in front of me. Unfortunately motorola
don't seem to have the v6 manual for the 2200 online and I'm blocked
from the Eircom support site as I'm now back in London so can't check
there.

> 
> I didn't really follow the details of your setup, but eircom certainly
> don't filter out port 22.

Thanks for that, solid info is good to know. At least if you can ssh
into your own server then that suggests there's no systemic blocking of
ssh going on :D  


> What does "telnet <IP address> 22" from outside say?

Using ssh & wireshark I can see the SYN to port 22 going out from my pc
and that's it. No SYN-ACK, no ICMP errors, nothing. I can't tell if its
actually reaching the laptop or disappearing into a black hole on the
router yet, but I suspect the router is binning it.

My attempt to open up the netopia when I was back home was done via the
basic mode settings, so that's what I suspect I've either misconfigured
it or it just plain doesn't work.