OpenSSH on LRP question

[Mark T. Ganzer]

The Linux IP Masquerade How-To recommends using the portfw directive
of ipmasqadm to do port forwarding. Try instead:

ipmasqadm portfw -f
ipmasqadm portfw -a -P tcp -L <external IP address> 22 \
	-R 192.168.100.3 22

I also suggest that unless you really want to spend a lot of time on
ipchains and ipmasqadm. you might want to look at using Seattle Firewall
(aka "Seawall") as the frontend for configuring your rules. There is a
Coyote LRP version of seawall available. See the project home page at:
http://seawall.sourceforge.net/

-Mark Ganzer


On Wed, 4 Jul 2001, Lan Barnes wrote:
> However, it isn't readily apparent how to get this ssh hole into
> my firewall. Coyote recommended adding the following line to my
> rc.local, which I did:
>
> ipmasqadm autofw -A -r tcp 22 22 -h 192.168.100.3
>
> No soap :-(
>
> Do I need to add other ipchain rules? Where? To rc.local?
>
> Also -- and this is a most annoying lapse on my part -- I've
> forgotten where to enable telnet into the router from inside the
> network.
>
> Help help?
>
>