Home / server / Questions / 194672
In Process
myusuf3
Asked: 2010-10-26 13:35:56 +0800 CST

Setting up ssh to a url

  • 772

I have enabled ssh on one of my computer at home, so I can get to it from my main IP.

No I have a domain where I forward it to my ip. Lets say this website is called

melikecandycoveredfrogs.com mapped to http://myip/

I am able to run

ssh myip and sucessfully connect but when i try ssh melikecandycoveredfrogs.com it doesn't seem to work. I have the ports forwarded and everything.

How can I achieve this? does the http:// cause the issue?

Please and thank you.

apache-2.2 ssh domain

2 Answers

  1. SSH is not HTTP, so discussion of your website is not relevant (and yes, passing http:// to ssh will confuse it).

    When you say "mapped to", I don't know if you mean that:

    • melikecandycoveredfrogs.com is an A record pointing to 1.2.3.4 (assuming 1.2.3.4 is your IP address)
    • melikecandcoveredfrogs.com uses a META REDIRECT to direct the browser to http://1.2.3.4 OR
    • You have an A record "myip" pointing at 1.2.3.4, and melikecandcoveredfrogs.com is a CNAME[1] pointing at the "myip" record
    • You're doing some kind of NAT or portforwarding on the machine that melikecandycoveredfrogs.com points to in order to direct traffic to the myip machine

    The first and third should work fine, the second won't (ssh is not http, your ssh client won't understand an HTTP redirect).

    The fourth option could potentially work; if you've remembered to forward port 22, if you've used the appropriate combination of DNAT and SNAT[1]

    Can you post the output of "ssh -v melikecandycoveredfrogs.com" (with hostnames/usernames/IPs altered) so we can see what's going wrong?

    [2] DNAT will always be required.

    If the return traffic from myip back to the source of your connection passes through melikecandycoveredfrogs.com on the way, melikecandycoveredfrogs.com gets a chance to do the required NAT on the way back out as well.

    If the traffic doesn't normally pass through melikecandycoveredfrogs.com though, you'll end up with your source machine making a connection to melikecandycoveredfrogs.com and getting a response from myip, which is going to confuse your source machine, and it will just drop the confusing packets.

    In this case, melikecandycoveredfrogs.com will need to do SNAT as well; so that myip thinks the connection originated from melikecandycoveredfrogs.com and sends the response back there; melikecandycoveredfrogs.com can then rewrite the addresses and send it back to your source machine.

    I'm fairly sure this isn't your problem though, as http connections would have the same problem, and the way you've asked your question implies that http is working fine.

    • 8

  2. When did you set up the domain? It may take some time for the new domain information to propagate. At the command line try running host melikecandycoveredfrogs.com and make sure that the result is myip. If it isn't then either your domain hasn't propagated yet or you haven't setup the domain correctly.

    • 1