[Nottingham] Dealing with a router that does not support Port Forwarding

[Paul]

The very quick answer is YES. Most SSH terminals allow you to set a port 
and all Linux servers let you set the ports the SSH server runs on.

So pick a predefined port on your your that forwards TCP. For this 
example I will use a Quake port 27950 (you can find the quake ports here 
http://www.gameconfig.co.uk/ports.aspx?game=quake+3  if you interested.

First ssh to your Linux box and get root privileges (sudo bash)

next locate your distributions ssh server config (Debian its calld 
sshd_config and is located in /etc/ssh)
Now you need to open the file in your text editor (nano, vi, emacs) and 
find the line Port 22
and add directly under it the line Port 27950
save the file and restart the SSH server.

Now you server will accept SSH connections on either Port 22 or 27950

So yes you can do it on the firewall and using this method you could 
even do it to multiple servers by just changing the port no on each.


Hope this helps


RG


On 07/05/15 09:03, Jason Irwin wrote:
> Yes indeed, I have come across such a beast. In theory it should be
> possible (they have predefined ports for "World of Warcraft" etc) but it
> does not work.
>
> It's a Telefonica Movistar Homestation, OEM is ADB Broadband Italia. I
> found the docs for both companies and the ADB ones say it does do it but
> it's not available on the firmware Telefonica Movistar ship. I managed
> to find an OEM hidden-page where I can get at the actual firmware (looks
> like a stripped down DD-WRT to me) but a port-forward option is missing.
>
> The router supports FTP, SSH, and Telnet; but no amount of name/password
> guessing could get me in.
>
> I was expecting many issues but this had me stumped on the last day.
> This leaves me with a RasPi in a foreign country that I can't easily SSH
> into because some ass-hat knobbled a basic feature of a router that even
> the cheapest, nastiest things support out-of-the-box.
>
> Is there any way for me to somehow get the RasPi to punch-out from the
> remote LAN and give me SSH access?
> Something about SSH reverse-proxy is rattling around the dusty corridors
> of my mind, but I've never done such a thing.
>
> I can do a screen share to a Windows box where I installed Cygwin, so I
> can access the Pi that way to set things up.
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.lug.org.uk/pipermail/nottingham/attachments/20150507/850b45d0/attachment.html>