Re: how to login port 22 with ssh behind a router.

pp wrote:

belmore:~ # ping -c 3 150.101.197.91
PING 150.101.197.91 (150.101.197.91): 56 data bytes
64 bytes from 150.101.197.91: icmp_seq=0 ttl=255 time=14.086 ms
64 bytes from 150.101.197.91: icmp_seq=1 ttl=255 time=288.383 ms
64 bytes from 150.101.197.91: icmp_seq=2 ttl=255 time=217.070 ms

Good.
This just prooved that you have a perfectly working route to the router of your ISP. So no problem here.

belmore:~ # host 150.101.197.91
91.197.101.150.in-addr.arpa domain name pointer loop0.lns2.syd7.internode.on.net.

belmore:~ # host www.freebsd.org
www.freebsd.org has address 69.147.83.33
www.freebsd.org mail is handled by 0 .

Good here too.
This prooves that forward and reverse name resolution also works fine on your home system. So no problem here either.


belmore:~ # netstat -rf inet
Routing tables

Internet:
Destination Gateway Flags Refs Use Netif Expire
default loop0.lns2.syd7.in UGS 0 2030319 tun0
10.1.10/24 link#2 UC 0 0 sis1
10.1.99/24 link#2 UC 0 419 sis1
localhost localhost UH 0 1756 lo0
loop0.lns2.syd7.in ppp244-137.static. UH 1 1683 tun0
192.168.1 link#2 UC 0 0 sis1
192.168.1.199 00:0f:b0:cc:10:74 UHLW 1 6147 sis1 1159
192.168.1.233 00:16:e6:84:43:ac UHLW 1 44910 sis1 702

This shows that the routing table on your home system is perfectly good.
Therefore your problem is not with your home system settings, not with your ISP, and not with any firewall/gateway/router before you reach your data centre.
This leaves us with either a data centre firewall/nat problem or an improper setting on your machine inside the data centre.

the ip at datacentre is 202.51.xx.xx

This is not a private IP, which is very good. This means that your server does not need to be NATed, but can be directly connected to the internet.
It doesn't mean that it is not NATed, it only means it does not need to be.

I assume that pinging that IP address from your home system works fine.
Let me know if it doesn't!

If you run ssh with the -v option it might show you where the problem is.
Try:
ssh -v username_here@xxxxxxxxxxxxxxxxxxxxxx

The output of that command could also help us to know what is wrong there, so you may want to include the output here (mask out any confidential IP address, username, etc).

Also, I found these links on Google which deal with the same problem you are experiencing. Reading these may also help you.

http://www.snailbook.com/faq/libwrap-oops.auto.html
http://www.hummingbird.com/support/nc/issues/con7002867.html?cks=y
http://lists.debian.org/debian-user/2003/06/msg02345.html

If your problem is still not solved, try ssh -v (as above) and include the results here!

Regards,
Keve


--
Keve Nagy * Debrecen * HUNGARY
if you need to reply directly:
keve(at)mail(dot)poliod(dot)hu
.

Relevant Pages

  • Re: how to login port 22 with ssh behind a router.
    ... This prooves that forward and reverse name resolution also works fine on your home system. ... Therefore your problem is not with your home system settings, not with your ISP, and not with any firewall/gateway/router before you reach your data centre. ... If you run ssh with the -v option it might show you where the problem is. ...
    (comp.unix.bsd.freebsd.misc)
  • Re: Losing part of the Internet-connection, from time to time.
    ... I can use my Internet-connection just fine (everything works (www, ftp, ... ssh etc) and has normal speed). ... that my ISP get owerloaded between 7pm and 10pm? ... was a recent FCC case regarding this. ...
    (comp.security.firewalls)
  • Re: Dynamic IP
    ... There are other ways to do this than with dynamic DNS, ... go "ssh user@$IP_ADDRESS", and Yo're done. ... Your ISP gave You, especially if it changes while You're not at home. ... dynamic DNS service), all services that Your box offers are available ...
    (comp.os.linux.networking)
  • Re: SSH dictionary attacks, and throtteling
    ... > functionality off the system to things like GMail for mail, ... > web hosting and such, as the offerings are getting better and even ... I have always been able to SSH into my PC to change hosts.deny/allow from my ... My brother in laws ISP, on the other hand, seems to give me yet another dynamic ...
    (uk.comp.os.linux)
  • Re: create inbound tunnel through firewall.
    ... > ssh) to that computer. ... local network. ... ISP, to know how to route to his RFC1918 address. ... While I do have a publicly reachable address to my firewall, ...
    (alt.os.linux)