Topic: SSH - Allow public Access problem

[AKn]

Good day,

I have a small office server running SME server v7.3 now (it started with v7.1). Originally, it was setup as 'Server Mode: servergateway-private' because no external use was planned. SSH was turned on for local network use; I use ssh via linux and Putty.

Recently, I've had a request for file access via the internet. The data is not secret so I've looked at both VPN/PPTP and SSH access for a remote user. I have not been able to get either working properly. There is a DLink ADSL 500T router between the server and the ISP. The TCP 1723, GRE * and TCP 822 ports have been opened on the router. A valid account with dyndns.org is pointing to our server.

Under Remote Access Settings: currently,
Number of PPTP clients:  2
Secure shell access: Allow Public Access (Entire Internet)
Allow administrative command line access over secure shell:   Yes
Allow secure shell access using standard passwords : Yes
TCP Port for secure shell access: 822

A user was created with 'VPN Client Access'
The same user was updated 'chsh -s /bin/bash jim'
   and 'db accounts setprop jim /bin/bash'

With Putty on the local network, I am able to logon to this new account. From the internet, my user is not able to logon. There is a logon prompt, a password prompt and then no further response. Eventually, putty times out.
The messsages log shows
'sshd(pam_unix)[15820]: session opened for user jim by (uid=0)'
and ten minutes later : 'sshd(pam_unix)[15820]: session closed for user jim'

We've tweaked a number of things but cannot get the connection to work properly.
'config setprop ssh access public'
'config setprop vpn access public'
'config setprop pptp access public'

Any suggestions as to what to do next would be appreciated!!

ak

[william_syd]

Good day,

I have a small office server running SME server v7.3 now (it started with v7.1). Originally, it was setup as 'Server Mode: servergateway-private' because no external use was planned. SSH was turned on for local network use; I use ssh via linux and Putty.

You did change the mode?

We've tweaked a number of things but cannot get the connection to work properly.
'config setprop ssh access public'
'config setprop vpn access public'
'config setprop pptp access public'

Are these typos ?

[AKn]

g'day,

I did not change the 'mode' because I was not sure of all the effects it would have. I was also not sure how to change it. I assumed through the admin logon but did not try it yet.

The other three commands are from another post that I found on the forums. The other post seemed to have similar problems.

ak

[AKn]

g'day,

The other reason that I did not change the 'mode' was because I was not sure if this was necessary for ssh access to the server. When I think of public access, I think of web/html or ftp.

ak

[william_syd]

g'day,

I did not change the 'mode' because I was not sure of all the effects it would have. I was also not sure how to change it. I assumed through the admin logon but did not try it yet.

The other three commands are from another post that I found on the forums. The other post seemed to have similar problems.

ak

Have a read of the manual.

Operation_Mode

I've never gone from Private server and gateway to Server and gateway mode.

I suspect you will lose nothing and gain more access to services running on the box.

[william_syd]

I just confirmed that in Private server and gateway mode SSH access is possible from the internet when allowed via the server-manager under Remote Access >> Secure Shell Settings.

Networking Parameters
                      Server Mode   servergateway-private
   Local IP address / subnet mask   192.168.20.1/255.255.255.0
External IP address / subnet mask   192.168.2.20/255.255.255.0
                          Gateway   192.168.2.1
        Additional local networks   192.168.20.0/255.255.255.0
                      DHCP server   enabled
  Beginning of DHCP address range   192.168.20.65
        End of DHCP address range   192.168.20.250