D_Day
Senior Member
What’s that tool called?anyone else getting a closed port on the ssh port over the wan
even though ssh is only enabled on the lan?
View attachment 15550
What’s that tool called?anyone else getting a closed port on the ssh port over the wan
even though ssh is only enabled on the lan?
View attachment 15550
netstat -anp | grep :22 | grep LISTEN
iptables -L INPUT -v
netstat -anp | grep :22 | grep LISTEN
tcp 0 0 192.168.1.1:22 0.0.0.0:* LISTEN 24074/dropbear
Thanks for that!
He has a nice little DNS Benchmark tool as well.T
Thanks for that!
I need to get on my laptop for that one but that will be tomorrow now.
Trust buy verify. What is the output of these commands?
Code:netstat -anp | grep :22 | grep LISTEN iptables -L INPUT -v
From the first command, you're looking for something like this with just your router LAN IP listed:
Code:netstat -anp | grep :22 | grep LISTEN tcp 0 0 192.168.1.1:22 0.0.0.0:* LISTEN 24074/dropbear
From the second command, just looking for any unusual lines and to make sure there are no extra rules to ACCEPT ssh. I ran ShieldsUp! and watched the last line (DROP) increase as it worked its way through the ports.
admin@odyssey:/tmp/home/root# netstat -anp | grep :22 | grep LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 319/dropbear
tcp 0 0 :::22 :::* LISTEN
Double check the SSH setting for LAN. It shouldn’t be listening on 0.0.0.0 if it’s truly LAN only. Or restart sshd in case the router didn’t do it.Code:admin@odyssey:/tmp/home/root# netstat -anp | grep :22 | grep LISTEN tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 319/dropbear tcp 0 0 :::22 :::* LISTEN
service restart_sshd
Double check the SSH setting for LAN. It shouldn’t be listening on 0.0.0.0 if it’s truly LAN only. Or restart sshd in case the router didn’t do it.
And do you use IPv6?Code:service restart_sshd
Just have to ask: in your earlier post your router was called “odyssey” at the terminal prompt. In this post it’s named “aurora”. Did you rename it between posts or are you dealing with multiple devices?yes i do use ipv6
admin@aurora:/tmp/home/root# service restart_sshd
Done.
still a closed port
Just have to ask: in your earlier post your router was called “odyssey” at the terminal prompt. In this post it’s named “aurora”. Did you rename it between posts or are you dealing with multiple devices?
Oh man, I haven't been to Steve Gibson's site in well over a decade! I've completely forgotten about it. Thanks for the reminder.
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!