> -----Original Message-----
> From: Sven Vogel [mailto:acidlog at gmail dot com]
> Sent: 26 February 2005 21:12
> To: m0n0wall at lists dot m0n0 dot ch
> Subject: [m0n0wall] ssh more details
> okay more details:
> monowall(soekris) ip: 192.168.1.1
> windows workstation: ip 192.168.1.3
> linux workstation: 192.168.1.4
> they got the ips from dhcp
> the windows and linux workstation are connected in a hub. the hub is
> connected in one of the 4501 lan interfaces.
> all ping work good from windows to mono and linux and so on....
> i connect to my service provider with the wan interface from the
> soekris with monowall. its an pppoe connection. there are no problems.
> on my linux workstation i run a sshd. i use putty from windows to
> connect the linux workstation with the ip 192.168.1.4 and port 22.
> there are no problems i can login and see my shell.
> so i thought i can connect about the internet to my linux workstation
> but i need to test it. i setup a dyndns adress and say monowall
> transfer the actually ip adress.
> no problem it work good.
> then i use putty to connect this dynamic ip or to the dns adress. its
> the same. but i get an connection refused.
> occurred to me i must configurate mono that it accept the inbound
> connection and the port 22.
> i make the follow settings:
> i got to nat and confirgure this and set a hook by Auto-add a firewall
> rule to permit traffic through this NAT rule.
> If Proto Ext. port range NAT IP Int. port range Description
> WAN TCP 22 (SSH) 192.168.1.4 22 (SSH) ssh2
> in the rules i got this
> Proto Source Port Destination Port Description
> TCP * * 192.168.1.4 22 (SSH) NAT ssh2
> i thought it will be work.
> maybe i have an understanding problem:
> is it possible to use putty and go out in the internet and come back
> about the same interface. so i use the isp ip.
> windows(putty) ---> mono --> dyndns ---> mono ---> linux
> is this possible?
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
As Chris said it isn't. Read http://m0n0.ch/wall/docbook/faq-lannat.html for
an explanation and workaround.