trying to open just one port on WAN eth1

[RobFantini]

Hello

I'm trying to open up 1 port on WAN for ssh access . for now I want it open from everywhere. later I'll open to just IP ranges..

eth1 is direct connected to cable modem and has a fixed WAN address.

So far I can not connect using the following:

firewall is enabled for host .

Host firewall rule:

s77  /etc/pve/nodes/s77 # cat host.fw
[OPTIONS]

log_level_in: info

[RULES]

IN ACCEPT -i eth1 -source 0.0.0.0 -dest 10.1.10.71 -p tcp -dport 61421 -sport any

cluster.fw :

[OPTIONS]

enable: 1
policy_in: ACCEPT

[IPSET management]

10.0.0.0/8
127.0.0.0/8
172.16.0.0/12
192.168.0.0/16

any idea on how I have it set incorrectly?

 

[wahmed]

Shouldnt the -dport be port 22?

 

[RobFantini]

Hello Wasim
thanks for responding and apoligize for the delated response...

I have that port in sshd_config so -dport should be OK.