From: BitTwister@mouse-potato.com   
      
   On Thu, 17 May 2012 11:06:43 -0600, Warren Post wrote:   
   >   
   > The box in question is mdv2010.2. There is no router; it is directly   
   > connected to the ISP's cable modem.   
      
   my ISP's cable modem is a router and I am connected via the ethernet port.   
      
      
      
   > On the web one user reported best results, when sshing into one's own box   
   > for testing purposes, to ssh into a different account than what you are   
   > using. I tried that (see below); no change.   
      
   No idea why that would make a difference.   
      
      
   > Also on the web another user reported that he couldn't ssh into his own   
   > box, but could ssh into his box from outside his local network:   
      
   I see no reason for that to make a difference except for firewall/wrapper   
   rules.   
      
   Here you can see me attempting to connect to my account on my system   
   via my WAN ip address.   
      
   get_wan_ip.pl is a perl script to get my WAN ip address and I replaced   
   my ip address with my_ip.   
      
      
   $ ssh $USER@$(get_wan_ip.pl)   
   and you see my shorewall rules blocking the attempt from this snippet from   
   /var/log/messages   
      
   May 17 13:30:08 wb kernel: [69333.568505] Shorewall:net2fw:DROP:IN=eth0 OUT=   
   MAC=d4:85:64:0d:ef:a4:00:26:62:de:98:22:08:00 SRC=my_ip DST=192.168.1.132   
   LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=43726 DF PROTO=TCP SPT=1024 DPT=22   
   WINDOW=14600 RES=0x00 SYN URGP=0   
      
      
   After, adding my WAN ip to shorewall/rules and doing a shorewall restart,   
   I get   
      
   $ ssh $USER@$(get_wan_ip.pl)   
   ssh_exchange_identification: Connection closed by remote host   
      
   snippet from /var/log/messages   
   May 17 13:37:02 wb sshd[26624]: refused connect from my_ip   
      
   Since I have TCP Wrappers installed, I added my WAN ip to /etc/hosts.allow, I   
   get   
      
   $ ssh $USER@$(get_wan_ip.pl)   
   Warning: Permanently added 'my_ip' (RSA) to the list of known hosts.   
   Last login: Wed May 16 18:15:23 2012   
      
   which shows you I can log into my own account on my system using   
   the WAN ip address.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)