All ssh attempts at connecting to the WAN IP address fail. For example,
ssh user@Wan.IP.Address -vvv -p 2236 OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 debug1: Reading configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 19: Applying options for * debug2: ssh_connect: needpriv 0 debug1: Connecting to 22.214.171.124 [126.96.36.199] port 2236. debug1: connect to address 188.8.131.52 port 2236: Connection refused ssh: connect to host 184.108.40.206 port 2236: Connection refused
ssh user@Internal.IP.Address -p 2236 -vvv
succeeds when using a separate laptop.
Typical troubleshooting information:
- sshd_config has been updated for new port and allows connections
- ssh server is up and running, and has been reset between any configuration touches
- ufw is disabled
- port 2236 has been forwarded to the internal IP address of the desktop on the router
- telnet and tcptraceroute on the port fail for the WAN IP address, but they succeed for the local IP address
iptables (have been flushed and reset multiple times):
sudo iptables -L Chain INPUT (policy ACCEPT) target ||||||| prot opt source |||| destination ACCEPT |||| all -- anywhere |||| anywhere ACCEPT |||| all -- anywhere |||| anywhere |||| state RELATED,ESTABLISHED ACCEPT |||| tcp -- anywhere |||| anywhere |||| tcp dpt:2236
Chain FORWARD (policy ACCEPT) target |||| prot opt source |||| destination
Chain OUTPUT (policy ACCEPT) target |||| prot opt source |||| destination
sudo netstat -putan | grep LISTEN | grep 2236 tcp ||||| 0 ||||| 0 0.0.0.0:2236 |||||| 0.0.0.0:* |||||| LISTEN 5132/sshd tcp6 ||||| 0 ||||| 0 :::2236 ||||| :::* LISTEN 5132/sshd
|||| bars are used for help with whitespace formatting.