Enable \ Disable WAN SSH using a script

[oversim]

Hello,
I would like to enable or disable ssh daemon wan access.

I tried to automated it using a script

nvram set sshd_wan=0 (or 1)
service restart_httpd

But it doesn't work.. What is wrong?

 

[ryzhov_al]

As you can see from source code, sshd_wan is used only in startfirewall() function. Find what services calls it.

IMHO, it's better to try another approach. You can enable SSH WAN access and add/remove appropriate iptables rule:

-A INPUT -i ppp0 -p tcp -m tcp --dport XXXXX -m state --state NEW -j SSHBFP

You need to do it twice:
1) in automation script,
2) in /jffs/scripts/firewall-start script, or you custom settings will be lost with next firewall rules update.

 

[AndreyPopov]

may be start dropbear like this:

dropbear -p `nvram get lan_ipaddr`:`nvram get sshd_port`

 

[oversim]

Thank all,
I found that:

nvram set sshd_wan=0/1
service restart_firewall

works