Running openvpn or ssh on port 443

[topazguru]

Hi,

I have AC66U router and Asuswrt firmware (3.0.0.4.374.38_2).

My config:
NAT Acceleration: disable
AiCloud: off
UPNP: Allowed internal port range 1-65535
UPNP: Allowed external port range 1-65535
Enable Telnet: yes
Enable SSH: yes
SSH service port: 443
Allow SSH access from WAN: yes

I have the following issues:
1. If SSH port 22 all OK. It's visible/open from WAN.
2. If SSH port from 1 to 1024? it's visible from LAN but closed from WAN.
3. If SSH port is higher ther 1024 all OK.
4. Telnet 23 port is closed from WAN.
5. If I launch OpenVPN server on port 443 (and SSH on 22) it started but not visible from WAN.

So questions:
What should I do to access SSH on port 443 from WAN?
What should I do to access OpenVPN on port 443 (when SSH on 22)?
May be I should start some iptables rules (which?) in the firewall-start script or redirect ports (e.g. from 443 WAN to 22 LAN for SSH) in the web interface or something else?

SSH is prefer for me, but if no way to open WAN 443 for SSH then OpenVPN. I don't need them both.

Thx.

 

[AdvHomeServer]

If you need to direct port 443 to your PC, then you need to set up a DDNS account through Asus (free), forward your port 443 inbound communication to the PC with the files you want using port forwarding, and use an SSH client.

This link will explain port forwarding with an asus router. Other articles will explain DDNS.

You might want to use OpenSSL to create certificates, otherwise secure communication will be impossible. There are articles on the site that will explain how to do it for free.

 

[oversim]

Currently I'm using a server ovpn installed via opkg in my N66U and it's waiting for connection on 443 port.. I did not setup any virtual server, port trigger settings, only configured as listening on 443

 

[RMerlin]

Port 443 is used by AiCloud. Make sure you don't have any port conflict there.

Usually, using a known service on the port usually meant for another other known service is bad practice. It tends to introduce a fair amount of headaches, not to mention port scanners that will be trying to connect to a known service, and issue commands meant for that other service. If you really need to use a non-standard port, use an ephemeral port (>1024).

 

[topazguru]

Port 443 is used by AiCloud. Make sure you don't have any port conflict there.

I switched off ovpn and ssh then switched on AiCloud with default settings. Port 443 is still closed from WAN. It looks like 443 is hardcoded to be closed from WAN. In LAN it's available.

 

[RMerlin]

I switched off ovpn and ssh then switched on AiCloud with default settings. Port 443 is still closed from WAN. It looks like 443 is hardcoded to be closed from WAN. In LAN it's available.

Then it must be something on your ISP or modem's end blocking port 443, because port 443 is what AiCloud uses for access over WAN.

 

[topazguru]

Then it must be something on your ISP or modem's end blocking port 443

RMerlin thanks, it was a problem with ISP.
You do great things!