Jump to content

ssh to my ubuntu server behind CH7465VF router


Recommended Posts

I am trying to connect from an outside network via ssh with rsa keys to my Ubuntu server behind CH7465VF router.

I found the DS-Lite address of the router and I can ping6 its FQDN address without problem (IPv4 ping doesn't work).

Only few ports seem to be open from the outside, namely 21, 53, 80, 443, 8080.

In router management UI at 192.168.0.1 I disabled IPv6 Firewall and configured IPv6 port filtering as follows:

- Inbound

- Source IPv6 addresses = All

- Destination IPv6 address = my ubuntu server ipv6 address

- Protocol = TCP

- Source port = 8080

- Destination port = 22

- Allow

- Enabled

 

I chose 8080 as a test port to verify the ssh connectivity. I am trying several ssh options, the most relevant result to provide here is the following:

ssh -6 -p 8080  -vvv -i ~/.ssh/ubuntusrvrsa <user>@<routerDSLiteFQDN>

In the verbose log I can see that connection to router on port 8080 is established and not refused:

debug1: Connecting to <DSLiteFQDNaddress> port 8080.
debug1: Connection established.

then it throws 400 BadRequest

The request could not be understood by the server. Please verify the site you are attempting to access and retry.

 

I am trying different ssh options and getting different results, what I think is meaningful is that connections on port 8080 of the router are not refused.

 

Question is whether is possible to open different ports on the router from the outside and what configuration should be set up in the router configuration UI, which seems to be extremely basic and not many feature available.

  • Kabel 500 Mb/s
  • Super
  • Klasik
  • CH7465VF
  • N/A
Link to comment
Share on other sites

I would recommend switching to an IPv4 address, there are often problems with IPv6 DS-lite in similar cases.

If you don't speak Czech, or don't have someone who can deal with this over the phone in Czech, you should write to Vodafone to request a change of IP address via the contact form:

https://tam.je/enforum

  • Kabel 150 Mb/s
  • -
  • Komfort
  • Compal VF, VTV box, CA modul
  • Brno
  • Speedtest
Link to comment
Share on other sites

thx for your answer @tomus,not quite the one I was looking for though.

Why IPv6 shouldn't do the job?

What I am interested to explore is

- to have a non-standard protocol port open for inbound traffic, say 12345

- have port forwarding or virtual server enabled on the router. I am not sure that the section IP filtering is actually the right one to make ssh connections working from outside

With the current (limited in my opinion) set of features available in my router, is remote ssh connection possible to happen?

  • Kabel 500 Mb/s
  • Super
  • Klasik
  • CH7465VF
  • N/A
Link to comment
Share on other sites

There's no IPv6 NAT on the router, so there can't be any IPv6 forwarding by design. You need to open firewall, sometimes even disable it completely (the config options of the Compal router suck).

When connecting from the outside, connect to the IPv6 address of the Ubuntu server, that'll do the job.

  • -
  • -
  • -
  • Compal, 3xCA modul
  • Praha
  • Speedtest
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...