WAN -> LAN ssh problem

core

Hi everyone,

this is not exactly an openSSH problem, but a generic ssh one. Nonetheless, I hope this is the correct board for such a question.

I switched to pfSense from a homebrew packet filter for our small network. Previously I could connect from an external machine to an internal one using ssh. Using pfSense I face the problem that the connection passes through the firewall (a matching rule for port 22 was created) and reaches the destination system, but never gets ACKed. I can see the status SYN_SENT on the originating system, and SYN_RCVD on the destination but this is as far as it goes.

I am completely at a loss here. Does this sound familiar to anyone? Hints and suggestions are greatly appreciated.

Regards
Chris

Cry Havok

So, just checking:

You've got a NAT Rule to forward traffic
You've got a matching firewall rule to allow it
The internal host has the pfSense host as the default gateway

core

Mea culpa! There was a typo in the default gateway config. :-[ I would NEVER have thought of rechecking that. You really made my day, cry havok. Thanks!

Cry Havok

It's an easy mistake to make, from personal experience :)