Port Forwarding on Asus RT-AC66U

[mattmcquiff]

Hi I am new to this =, and its becoming a headache as I thought it would be simple (ish ) to setup.

So the set up is Virgin Super Hub 2 AC that is in modem mode (in this mode there are no other options to experiment with) This connects to the ASUS RT-AC66U router. Static IP address have been set up.
Under port forwarding, this is what I have set

Service Name = SSH
Port Range = 22
Local IP = 192.168.1.179
Local port = 22
This has been added, applied and enable.

This is connecting to the OSMC Raspberry Pi and has SSH enable (tested confirmed and default password changed)
I also tried the same method but to connect to the mac and the result was the same , operation times out.

Looking at the ASUS log this is what I can see.


tcp 62.172.xxx.xx:26527 192.168.1.1:80 TIME_WAIT
tcp 62.172.xxx.xx:55321 192.168.1.1:80 TIME_WAIT
tcp 62.172.xxx.xx:52920 192.168.1.1:80 TIME_WAIT
tcp 62.172.xxx.xx:35916 192.168.1.1:80 TIME_WAIT
tcp 62.172.xxx.xx:22587 192.168.1.1:80 TIME_WAIT
udp 192.168.1.179:37666 212.xx.xx.35:443 UNREPLIED


The last log could be answering the issue. The OSMC has a VPN Running, but should this cause an issue since I can see the router (via remote access) and therefore I should be able to begin connecting to inside my network.

I hope someone can help with this.

Matt

 

[wouterv]

Maybe you shall try to write in words what you try to establish.

Your port forwarding will do the following: a request from anywhere on the Internet send to your router port 22 will be forwarded to port 22 of the computer with IP address 192.168.1.179 on your LAN.
The computer with IP address 192.168.1.179 on your LAN shall have an application running that responds to port 22, which is usually SSH.

I do not see a relation to the log and the port forward you have set.

You also seems to have enabled remote access, please confirm this mean you have set "Enable Web Access from WAN" to Yes?
This function is suspected to have a vulnerability, it is strongly advised to set "Enable Web Access from WAN" to No for now.

 

[drabisan]

And it's not a bad practice to do port forwarding using public well known ports.
Use something else, above 1024. You're the only one that have to remember it, but you won't see traffic from all exotic countries on this planet.
And yes, I +1 to above post, you do seems to have remote access enable and that's never a good idea!