PDA

Bekijk de volledige versie : Allow SSH on port 443



wary
06-06-2008, 19:13
Hello!
Because from university I can only use port 443, I want to use SSH to my router on this port!
I don't want to change the port the SSH-server listens, because I want to use it from the internal network.
It works if I add the following IPTABLES rules
iptables -D INPUT -j DROP
iptables -A INPUT -p tcp --dport 443 -j ACCEPT
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 443 -j DNAT --to-destination $4:22But then, all ports are open :(
If I add
iptables -A INPUT -j DROP it doesn't work anymore.
What do I need to change?

KGy
07-06-2008, 05:03
Hi!

Try this code in your post-boot:

...
# Activate SSH
dropbear -p 22 -p 443
...

And change your post-firewall code:

...
iptables -t nat -A PREROUTING -i $1 -p tcp --dport 22 -j DNAT \
--to-destination $4:22
iptables -t nat -A PREROUTING -i $1 -p tcp --dport 443 -j DNAT \
--to-destination $4:443
iptabled -A FORWARD -i $1 -o $3 -p tcp --dport 22 -d $4 -j ACCEPT
iptabled -A FORWARD -i $1 -o $3 -p tcp --dport 443 -d $4 -j ACCEPT
...

You can connet to your router at port 22 and 443, too.

Bye,
George

ps: and sorry my English.

wary
10-06-2008, 16:05
Thank you!
It works!