What's new
  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Cant enable SSH WAN access

andresmorago

Senior Member
Hello
I have a AC68U running 384.9 My ssh access is set to LAN only and im requiring to enable wan access.

when i go to the SYSTEM tab under Administration and try to change the parameter Enable SSH from LAN Only to LAN+WAN, page will reload but http access will freeze for some minutes, router will continue working normally (internet and wifi). When http access to the router goes up again, Enable SSH will go back to LAN only preventing WAN access to ssh.

Any ideas on how to solve this?

thanks
 
Hello
I have a AC68U running 384.9 My ssh access is set to LAN only and im requiring to enable wan access.

when i go to the SYSTEM tab under Administration and try to change the parameter Enable SSH from LAN Only to LAN+WAN, page will reload but http access will freeze for some minutes, router will continue working normally (internet and wifi). When http access to the router goes up again, Enable SSH will go back to LAN only preventing WAN access to ssh.

Any ideas on how to solve this?

thanks
Do you have Skynet installed. It has a safety feature making sure you don't expose ssh to WAN. (By the way bad idea)
 
nevermind. just figured it out.
Skynet is the one preventing wan access

Code:
Mar  6 20:53:58 Skynet: [!] Insecure Setting Detected - Disabling WAN SSH Access
 
A good solution would be to setup a OVPN server and login with LAN and WAN access. This will give you the ability to login to your webui, ssh almost anything you want. If you have Skynet, Diversion etc. it will work for your connected client.
 
A good solution would be to setup a OVPN server and login with LAN and WAN access. This will give you the ability to login to your webui, ssh almost anything you want. If you have Skynet, Diversion etc. it will work for your connected client.

thanks! will do that way instead
 
Many reports here on the forum of people who got hacked by enabling SSH access from the WAN.
To be fair I don't remember seeing any reports of people being hacked through SSH. All the ones I remember were presumed to be through the web server.
 
To be fair I don't remember seeing any reports of people being hacked through SSH. All the ones I remember were presumed to be through the web server.
You are correct. I got my hacks mixed up. It was people who had enabled GUI access from the WAN. I am amazed at the number of bots out there scanning ports.
 

Similar threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Staff online

Back
Top