eferro
(usa Ubuntu)
Enviado em 21/04/2009 - 14:19h
Não funcionou, veja abaixo todas as configurações e verficações que fiz.
--------------------------------------------------------------------
No browser coloquei uma entrada no NAT -- Virtual Servers Setup
--------------------------------------------------------------------
Secure Shell Server (SSH) 22 22 TCP 22 22 192.168.254.XXX
--------------------------------------------------------------------
No browser coloquei uma entrada no NAT -- DMZ Host para o meu host
--------------------------------------------------------------------
DMZ Host IP Address: 192.168.254.XXX
------------------------------------------------------------------
Acessei o modem com telnet
------------------------------------------------------------------
$ telnet 192.168.254.254
Trying 192.168.254.254...
Connected to 192.168.254.254.
Escape character is '^]'.
=======================
DSL-500B
=======================
Login: TMAR#DLKT20060205
Password:
> remoteaccess show
remote access for FTP is enabled
remote access for HTTP is enabled
remote access for ICMP is enabled
remote access for SNMP is enabled
remote access for SSH is enabled
remote access for TELNET is enabled
remote access for TFTP is enabled
------------------------------------------------------------------
Obs.: Note que o acesso remoto por ssh está liberado
------------------------------------------------------------------
------------------------------------------------------------------
Vejamos agora o iptables
------------------------------------------------------------------
> iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT 2 -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere 192.168.254.XXX
ACCEPT tcp -- anywhere 192.168.254.XXX tcp dpt:ssh
ACCEPT all -- anywhere 224.0.0.0/3
TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DROP all -- anywhere 239.255.255.250
>
-------------------------------------------------------------------
De volta ao meu host vejamos um nmap no modem
nmap no modem: (vejam que a porta 22 não aparece)
-------------------------------------------------------------------
Starting Nmap 4.62 (
http://nmap.org ) at 2009-04-21 14:06 BRT
Interesting ports on 192.168.254.254:
Not shown: 1712 closed ports
PORT STATE SERVICE
21/tcp open ftp
23/tcp open telnet
80/tcp open http
Nmap done: 1 IP address (1 host up) scanned in 2.120 seconds
Não tenho mais idéias
