• Got it!

    From Shurato@618:300/50 to All on Tue Jul 15 21:25:00 2025
    Ok, it seems to work with OPNSense, but I can't get inbound SSH connections
    to work on any port... I'm not looking to connect to the OPNSense, but the
    BBS. All of the google suggestions are for the former, not the latter. My port forwarding is set up right for everything else, but ssh is timing out
    when trying to connect to shsbbs.net port 22. Any ideas? Mystic isn't
    showing any connections.

    --
    Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
    ,wss) (Ports 22,23,110,21,119,999)


    *** THE READER V4.50 [freeware]
    ---
    * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (618:300/50)
  • From Gamgee@618:250/24 to Shurato on Wed Jul 16 08:16:03 2025
    Shurato wrote to All <=-

    Ok, it seems to work with OPNSense, but I can't get inbound SSH connections to work on any port... I'm not looking to connect to the OPNSense, but the BBS. All of the google suggestions are for the
    former, not the latter. My port forwarding is set up right for
    everything else, but ssh is timing out when trying to connect to shsbbs.net port 22. Any ideas? Mystic isn't showing any connections.

    Is Mystic *listening* on port 22? I tried 'nmap' on that host, and it
    doesn't appear that there's anything active on port 22:

    danc@moria:~$ nmap shsbbs.net
    Starting Nmap 7.93 ( https://nmap.org ) at 2025-07-16 08:10 CDT
    Nmap scan report for shsbbs.net (174.27.216.208)
    Host is up (0.091s latency).
    rDNS record for 174.27.216.208: 174-27-216-208.bois.qwest.net
    Not shown: 995 filtered tcp ports (no-response)
    PORT STATE SERVICE
    21/tcp open ftp
    23/tcp open telnet
    80/tcp open http
    119/tcp open nntp
    443/tcp open https

    Nmap done: 1 IP address (1 host up) scanned in 6.70 seconds




    ... Gone crazy, be back later, please leave message.
    === MultiMail/Linux v0.52
    --- SBBSecho 3.28-Linux
    * Origin: Palantir * palantirbbs.ddns.net * Pensacola, FL * (618:250/24)
  • From Shurato@618:300/50 to Gamgee on Wed Jul 16 09:41:00 2025

    * In a message originally to Shurato, Gamgee said:

    Shurato wrote to All <=-

    Ok, it seems to work with OPNSense, but I can't get inbound SSH connections to work on any port... I'm not looking to connect to the OPNSense, but the BBS. All of the google suggestions are for the former, not the latter. My port forwarding is set up right for everything else, but ssh is timing out when trying to connect to shsbbs.net port 22. Any ideas? Mystic isn't showing any
    connections.

    Is Mystic *listening* on port 22? I tried 'nmap' on that host, and it doesn't appear that there's anything active on port 22:

    Yes, it is. Something in OPNSense is blocking it...

    danc@moria:~$ nmap shsbbs.net Starting Nmap 7.93 ( https://nmap.org
    ) at 2025-07-16 08:10 CDT Nmap scan report for shsbbs.net
    (174.27.216.208) Host is up (0.091s latency). rDNS record for 174.27.216.208: 174-27-216-208.bois.qwest.net Not shown: 995 filtered
    tcp ports (no-response) PORT STATE SERVICE 21/tcp open ftp 23/tcp
    open telnet 80/tcp open http 119/tcp open nntp 443/tcp open https

    Nmap done: 1 IP address (1 host up) scanned in 6.70 seconds




    ... Gone crazy, be back later, please leave message. ===
    MultiMail/Linux v0.52
    --- SBBSecho 3.28-Linux
    * Origin: Palantir * palantirbbs.ddns.net * Pensacola, FL * (618:250/24)

    --
    Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
    ,wss) (Ports 22,23,110,21,119,999)


    ---
    * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (618:300/50)
  • From Shurato@618:300/50 to Gamgee on Wed Jul 16 12:07:00 2025

    Shurato wrote to All <=-

    Ok, it seems to work with OPNSense, but I can't get inbound SSH connections to work on any port... I'm not looking to connect to the OPNSense, but the BBS. All of the google suggestions are for the former, not the latter. My port forwarding is set up right for everything else, but ssh is timing out when trying to connect to shsbbs.net port 22. Any ideas? Mystic isn't showing any
    connections.

    Is Mystic *listening* on port 22? I tried 'nmap' on that host, and it doesn't appear that there's anything active on port 22:

    danc@moria:~$ nmap shsbbs.net Starting Nmap 7.93 ( https://nmap.org
    ) at 2025-07-16 08:10 CDT Nmap scan report for shsbbs.net
    (174.27.216.208) Host is up (0.091s latency). rDNS record for 174.27.216.208: 174-27-216-208.bois.qwest.net Not shown: 995 filtered
    tcp ports (no-response) PORT STATE SERVICE 21/tcp open ftp 23/tcp
    open telnet 80/tcp open http 119/tcp open nntp 443/tcp open https

    Nmap done: 1 IP address (1 host up) scanned in 6.70 seconds

    Ok, the windows firewall wasn't set up for public access, only private and
    the sshd on the guest hadn't been installed since an OS reinstallation...
    User error is the way! Odd with the firewall rule, it was working with my ng1100!




    ... Gone crazy, be back later, please leave message. ===
    MultiMail/Linux v0.52
    --- SBBSecho 3.28-Linux
    * Origin: Palantir * palantirbbs.ddns.net * Pensacola, FL * (618:250/24)

    --
    Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
    ,wss) (Ports 22,23,110,21,119,999)


    *** THE READER V4.50 [freeware]
    ---
    * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (618:300/50)
  • From Gamgee@618:250/24 to Shurato on Wed Jul 16 16:15:53 2025
    Shurato wrote to Gamgee <=-

    Ok, it seems to work with OPNSense, but I can't get inbound SSH connections to work on any port... I'm not looking to connect to the OPNSense, but the BBS. All of the google suggestions are for the former, not the latter. My port forwarding is set up right for everything else, but ssh is timing out when trying to connect to shsbbs.net port 22. Any ideas? Mystic isn't showing any
    connections.

    Is Mystic *listening* on port 22? I tried 'nmap' on that host, and it doesn't appear that there's anything active on port 22:

    danc@moria:~$ nmap shsbbs.net Starting Nmap 7.93 ( https://nmap.org
    ) at 2025-07-16 08:10 CDT Nmap scan report for shsbbs.net
    (174.27.216.208) Host is up (0.091s latency). rDNS record for 174.27.216.208: 174-27-216-208.bois.qwest.net Not shown: 995 filtered
    tcp ports (no-response) PORT STATE SERVICE 21/tcp open ftp 23/tcp
    open telnet 80/tcp open http 119/tcp open nntp 443/tcp open https

    Nmap done: 1 IP address (1 host up) scanned in 6.70 seconds

    Ok, the windows firewall wasn't set up for public access, only private
    and the sshd on the guest hadn't been installed since an OS reinstallation... User error is the way! Odd with the firewall rule,
    it was working with my ng1100!

    Yep, nmap now shows port 22 available.

    You're welcome.



    ... Gone crazy, be back later, please leave message.
    === MultiMail/Linux v0.52
    --- SBBSecho 3.28-Linux
    * Origin: Palantir * palantirbbs.ddns.net * Pensacola, FL * (618:250/24)
  • From Shurato@618:300/50 to Gamgee on Wed Jul 16 14:37:00 2025

    * In a message originally to Shurato, Gamgee said:

    Shurato wrote to Gamgee <=-

    Ok, it seems to work with OPNSense, but I can't get inbound SSH connections to work on any port... I'm not looking to connect to
    the
    OPNSense, but the BBS. All of the google suggestions are for the former, not the latter. My port forwarding is set up right for everything else, but ssh is timing out when trying to connect to shsbbs.net port 22. Any ideas? Mystic isn't showing any
    connections.

    Is Mystic *listening* on port 22? I tried 'nmap' on that host, and
    it
    doesn't appear that there's anything active on port 22:

    danc@moria:~$ nmap shsbbs.net Starting Nmap 7.93 ( https://nmap.org ) at 2025-07-16 08:10 CDT Nmap scan report for shsbbs.net (174.27.216.208) Host is up (0.091s latency). rDNS record for 174.27.216.208: 174-27-216-208.bois.qwest.net Not shown: 995 filtered tcp ports (no-response) PORT STATE SERVICE 21/tcp open ftp 23/tcp
    open telnet 80/tcp open http 119/tcp open nntp 443/tcp open https

    Nmap done: 1 IP address (1 host up) scanned in 6.70 seconds

    Ok, the windows firewall wasn't set up for public access, only
    private
    and the sshd on the guest hadn't been installed since an OS reinstallation... User error is the way! Odd with the firewall rule, it was working with my ng1100!

    Yep, nmap now shows port 22 available.

    You're welcome.

    Thanks much, Dan!


    ... Gone crazy, be back later, please leave message. ===
    MultiMail/Linux v0.52
    --- SBBSecho 3.28-Linux
    * Origin: Palantir * palantirbbs.ddns.net * Pensacola, FL * (618:250/24)

    --
    Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
    ,wss) (Ports 22,23,110,21,119,999)


    ---
    * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (618:300/50)
  • From Digimaus@618:618/1 to Gamgee on Wed Jul 16 19:36:26 2025
    Gamgee wrote to Shurato <=-

    Yep, nmap now shows port 22 available.

    Personally, I turn off Windows Firewall. No need for it with a good edge firewall and programs that can handle being exposed to the public Internet.

    You're welcome.

    You sound like you've worked in IT for some reason. XD

    -- Sean "Did you turn it off and back on?"

    ... Ancient Chinese curse: may all your wishes be granted.
    --- MultiMail/Win v0.52
    * Origin: Outpost BBS * Johnson City, TN (618:618/1)
  • From Gamgee@618:250/24 to Digimaus on Wed Jul 16 20:41:04 2025
    Digimaus wrote to Gamgee <=-

    Gamgee wrote to Shurato <=-

    Yep, nmap now shows port 22 available.

    Personally, I turn off Windows Firewall. No need for it with a good
    edge firewall and programs that can handle being exposed to the public Internet.

    Absolutely. Thankfully, the only Windows around here is my wife's
    desktop, so I only have to turn it off once. ;-)

    You're welcome.

    You sound like you've worked in IT for some reason. XD

    Haha, no not really. Just a Linux geek and have a touch of BOFH in my
    genes, I guess. :-)

    ++ Sean "Did you turn it off and back on?"

    Now *that* is a standard IT/Helpdesk question... LOL



    ... Gone crazy, be back later, please leave message.
    === MultiMail/Linux v0.52
    --- SBBSecho 3.28-Linux
    * Origin: Palantir * palantirbbs.ddns.net * Pensacola, FL * (618:250/24)
  • From Sean Dennis@618:618/1 to Gamgee on Thu Jul 17 10:26:20 2025
    Hi Dan,

    Absolutely. Thankfully, the only Windows around here is my wife's
    desktop, so I only have to turn it off once. ;-)

    Yeah, at John Deere, they had so many problems becaue HQ -insistred- on leaving WF on and every time we had to update Windows via SCCM, that firewall would break and a manufacturing line would go down which was an expensive process. I'd log into the master controller system for that line, disable WF, and nine times out of ten, the line would magically work again.

    Just doing my job!

    I am looking at moving from pfSense on my edge firewall to OpenWRT. OpenWRT looks to be easier and much more functional for me since it has so many extensions. I'll probably put that off until next month. The next few weeks are going to be busy for me.

    I am also converting dozens of CIDR ranges to subnet so I can use the built-in port of AIX's firewall in ArcaOS. With ports 22 and 23 closed, I'll have a lot less problems that I did. I just want to keep these so-called security scanners from questionable "security firms" from portscanning my system constantly.

    -- Sean


    ...I know a good tagline when I steal one.

    --- ProBoard v2.17 [Reg]
    * Origin: Outpost BBS * Johnson City, TN (618:618/1)
  • From Gamgee@618:250/24 to Sean Dennis on Thu Jul 17 11:19:35 2025
    Sean Dennis wrote to Gamgee <=-

    Hi Dan,

    Absolutely. Thankfully, the only Windows around here is my wife's
    desktop, so I only have to turn it off once. ;-)

    Yeah, at John Deere, they had so many problems becaue HQ -insistred- on leaving WF on and every time we had to update Windows via SCCM, that firewall would break and a manufacturing line would go down which was
    an expensive process. I'd log into the master controller system for
    that line, disable WF, and nine times out of ten, the line would
    magically work again.

    Yep, I've seen similar. The *insistence* of HQ/IT sometimes is hard to believe or understand.

    I am looking at moving from pfSense on my edge firewall to OpenWRT. OpenWRT looks to be easier and much more functional for me since it has
    so many extensions. I'll probably put that off until next month. The next few weeks are going to be busy for me.

    I've been using 'IPFire' on a small-form-factor PC for many years and it
    has been great. Regular updates and LOTS of features. Linux-based, and
    free. Worth a look if you're "shopping around".



    ... All the easy problems have been solved.
    === MultiMail/Linux v0.52
    --- SBBSecho 3.28-Linux
    * Origin: Palantir * palantirbbs.ddns.net * Pensacola, FL * (618:250/24)