open ssh on the Asus WL520GU router on WAN (with LAN access - ok)

Question

linux

Hello,

Introductory: there is a wifi router Asus WL520GU with firmware "from Oleg" also known as "from enthusiasts".
There is access to it via telnet and ssh.
ssh on it raised using dropbear something like this:

mkdir -p /usr/local/etc/dropbear
dropbearkey -t dss -f /usr/local/etc/dropbear/dropbear_dss_host_key
dropbearkey -t rsa -f /usr/local/etc/dropbear/dropbear_rsa_host_key
mkdir -p /usr/local/sbin/
echo "#!/bin/sh" >> /usr/local/sbin/post-boot
chmod +x /usr/local/sbin/post-boot
echo "dropbear" >> /usr/local/sbin/post-boot
dropbear -a -p 12345
flashfs save && flashfs commit && flashfs enable

The only problem is that you can’t convince the router so that you can connect to ssh “outside” from the WAN (from the Internet, in fact). From the internal network (LAN) I connect quite normally.
Either the firewall fails to convince, or something else ... I don’t understand. Tell me please. I don’t want, somehow, just because of this little thing, to reflash it to DD-WRT or OpenWRT, since the rest, it seems, suited everything.

Thanks in advance

Answer 1

iptables -I INPUT -p tcp --dport  номер порта -j ACCEPT

Answer 2

there SSH is enabled directly in the web ui, emnip, although it depends on the specific firmware version

Answer 3

this is what it looks like on dd-wrt