Mosh instead of SSH

[XIII]

I would like to use Mosh instead of SSH to connect to my router: https://mosh.org

After installing the mosh-server package on the router using Entware I’m able to ssh into my router using Mosh (via the Termius App for iOS), but only if I’m on the local network of the router. If I try to remotely log in the attempts fail and SkyNet will even block me...

What do I need to change to be able to use Mosh remotely as well?

(Both locally and remote I use the ASUS DDNS address, so never 192.168.x.y)

 

[XIII]

Looks like I need to set up port forwarding?

• SSH: WAN TCP port 22 to LAN TCP port 22
• SSH: WAN UDP port 60000-60010 to LAN UDP port 60000-60010

http://www.instructables.com/id/Installing-Mosh-enabling-port-forwarding/

EDIT: Or is this only applicable to ssh using Mosh into a device (like a Raspberry Pi) behind the router?

 

[XIII]

Turned out to be much simpler: I had to whitelist the client IP's in SkyNet on the routers running mosh-server.

This will be a problem on the road though... (the client IP will be random)

(next challenge: also getting it to work from macOS instead of iOS)

 

[XIII]

(next challenge: also getting it to work from macOS instead of iOS)

Found a solution here: https://github.com/mobile-shell/mosh/issues/819

Apparently dropbear is not fully OpenSSH compatible. Adding --no-ssh-pty does the trick!

 

[XIII]

Unfortunately mosh is no longer working remotely, only local (on several different ASUS routers).

How can I debug this?

 

[XIII]

Apparently I have to perform this (using nat-start, after every boot?):

iptables -I INPUT 1 -p udp --dport 60000:61000 -j ACCEPT

Source: https://aws-labs.com/install-mosh/

 

[XIII]

Unfortunately this iptables entry seems to get lost now and then (I have to log in via SSH to run the script before being able to use Mosh again).

As I’m an absolute beginner with iptables: how can I debug/investigate this?

 

[Adamm]

Unfortunately this iptables entry seems to get lost now and then (I have to log in via SSH to run the script before being able to use Mosh again).

As I’m an absolute beginner with iptables: how can I debug/investigate this?

IPTables gets flushed during a range of activities, for persistent rules you will want to add them to firewall-start (along with a delete version above it to prevent duplicates).

 

[XIII]

Thanks. I’ll move it from nat-start to firewall-start.