How on a router with DD-WRT to open access to the port of an SSH tunnel made without openSSH?

H

hostadmin2012-07-28 02:17:36

linux

hostadmin, 2012-07-28 02:17:36

There is a home router with DD-WRT (192.168.1.1).
There is a 3g router in the country with OpenWrt.

Task: to have access from home computers to the web face of a country router.

An SSH tunnel has been made that launches on the country 3g router with the command.
dbclient -i /root/id_rsa -f -N -R 8888:127.0.0.1:80 [email protected]

The tunnel rises perfectly and by entering something like this on the home router, wget http://localhost:8888we get the main page of the web muzzle of the remote 3g router. But I just can't get to the web muzzle from my home computer. Logically, you need to enter the address 192.168.1.1:8888, but the browser does not connect.

What am I doing wrong?

Reply

Answer the question

In order to leave comments, you need to log in

5 answer(s)

H

hostadmin, 2012-07-28
@hostadmin

Won!
It turned out that by default dd-wrt runs dropbear without the ability to forward the port from any host. In order for it to allow connections from everywhere, you need to check this box:

S

shadowalone, 2012-07-28
@shadowalone

Try starting a tunnel like this:
dbclient -i /root/id_rsa -f -N -R 192.168.1.1:8888:127.0.0.1:80 [email protected]

S

smartlight, 2012-07-28
@smartlight

maybe you should connect DynDNS at home and open www to the world?

R

Ruma7a, 2012-07-28
@Ruma7a

Why don't you open the tunnel directly from your home computer, if you want to watch the web face on your home computer, m? Well, clients for all operating systems support this business, (win - putty, * nix - ssh) what is the point of raising the tunnel exactly on the router?

D

dennzo, 2014-02-23
@dennzo

I don't see any problems. On dd-vrt we are looking for a point-to-point description of the point-to-point OVPN, copy-paste two scripts through the webmord, (or in another way, who knows how)
we do it - the country caller, the home listener / server, and then the country house itself will install the tunnel, and do what want to. At the same time, the solution of all issues with a non-white and dynamic ip without one ip but-ip services that do not always work as we would like.
the fact that the country house with ovrt and not dd is not a problem, but in the script of the ovpn client for dd I had to tweak something when I made the client ovrt - the path to something or something like that,
little by little.