0

I run a SFTP Server (openSSH) on a HP Microserver G7 (CentOS 8) listening on 0.0.0.0 port 22. I can access the server from other devices on the SAME network (local network), but I can't access it from another network (WLAN/internet).

So I accessed my modem/router (an ZTE H108NS) and went to Advanced Setup -> NAT -> Virtual Server and added a port forwarded service for the SFTP Server as shown in the screenshot:

screenshot

I use my public IP and port 22 to my SFTP client to connect to my server but I can't. Connection is timed out.

The router's firewall is enabled, but as I know it doesn't matter when I use port forwarding. Am I right? Does SSH protocol also needs port tunneling?

Here is some of my router settings that may be useful to you:

screenshot1 screenshot2 screenshot3

7
  • Are you connecting from outside, or are you connecting from within your own LAN? Feb 12, 2020 at 14:07
  • I tried both (from another pc in the same network, and from my mobile phone with 4G). Feb 12, 2020 at 14:13
  • Some routers accumulate changes to their config, keep them pending and apply them all at once after you click some global "apply" button. In some cases this global "apply" may simply restart the router with the new config. Make sure you don't need (or already made) this step. In case of any doubt restart the router, confirm its configuration after restart is what you wanted, then test SFTP. Feb 12, 2020 at 14:47
  • Other things to check: (1) A firewall in your CentOS may be configured to accept incoming connections from your LAN only. (2) Your ISP may block incoming connections to some ports. In this case try to froward some "random" port (e.g. 9922) to 22. (3) You may be behind a Carrier-Grade NAT. Read this. Feb 12, 2020 at 14:55
  • According to the link you gave me it seems that my ISP indeed uses CGN. The IP address shown in whatsmyip is different from the WAN IP address in my router. What am I going to do now? Feb 12, 2020 at 17:54

1 Answer 1

-1

i know this post is a year old but you have to disable otenet advanced firewall by logging into https://ps.otenet.gr/active/ServiceActivation/csLoginAuthentication.jsp and disable the advanced firewall ! , to get your username and password can be processed online without a phone call !

1
  • 1
    Welcome to Superuser. It looks like this answer is specific to a single internet service provider (Otenet). As far as I am aware, there is no indication that the OP uses this internet service provider.
    – Joseph
    Feb 22, 2021 at 10:23

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .