Accessing machine from internet when booted with Archiso [SOLVED]

vipinbalakrishnan · 2018-07-26 08:53:22

Hi

I am working on a archiso live CD which is having some custom software and script added. Now i got a little issue with a scenario. .

If i boot with my CD in a system which is connected to a internet . I should be able to ssh to live CD.

In this scenario System1 which is booted with my live CD is connected to one ISP. And i am connected a different ISP.

How do i do this without modifying router configuration or without using UPNP. I don't want to add a static IP.

If any have any script please let me know.

Last edited by vipinbalakrishnan (2018-07-26 21:23:12)

seth · 2018-07-26 10:31:40

You mean you've a system behind a DMZ/NAT/firewall/port guard and want it to listen to WAN request but do not want to configure port forwarding - neither by hand nor (understanably) by UPnP?

The answer is "you don't" - preventing exactly that is the main purpose of those features (except for NAT, where it's more of a side-effect)
The work-around would be an external broker (ie. the server opens a connection to the broker and the client logs into the broker which forwards stuff)

The ISP/s is/are irrelevant and since this is most likely an XY-question: why do you need to WAN ssh into the installation iso itfp?

x33a · 2018-07-26 10:33:14

How is your live CD machine connected to the ISP? Is your machine getting a direct IP from the ISP or is it behind a router? What about the other machine? Post your full networking setup for both of the machines.

vipinbalakrishnan · 2018-07-26 13:24:34

seth and x33a Thanks for the reply,

Let as take System1 which will be booting with my custom live CD. And this will be connected to a ISP network to get internet

My system let as take the the name as system2 which is connected to a router and router connected to a ISP network to get internet.

Both System1 and System2 is using different ISP . And geographically System1 is far from me. So I want to do a remote installation of OS or troubleshoot remotely. For this I don't want to use third party software like teamviewer.

This is the actual purpose of this.

When I search internet, I got UPnP or port forwarding is one of the solution. But these two solution in my case having some disadvantages.
It is not mandatory that the person who boot my live CD will be knowing. How to configure port forwarding in router UI or may have different routers spec . And also chances are there UPnP is disabled in these routers. This is the reason i dont' want to use these two steps

Please let me know your thought on it.

Trilby · 2018-07-26 13:29:28

Assuming the target system is not behind a strict firewall, you likely just need a ddns:
https://wiki.archlinux.org/index.php/Dynamic_DNS

If it is behind a strict firewall blocking port 22, you either need to run sshd on another port, or if all but a few common ports are blocked, you may be S.O.L.

Last edited by Trilby (2018-07-26 13:31:10)

vipinbalakrishnan · 2018-07-26 13:34:25

Trilby., Thanks for the reply,
Dynamic DNS will help me to get the Public IP of System1 router. But how do I SSH to System1? If the router having UPnP disabled. Or did not add any configuration in router settings to do port forwarding. I explain my real scenario in post #4

Last edited by vipinbalakrishnan (2018-07-26 13:35:38)

seth · 2018-07-26 13:37:46

@Trilby, I gathered that the remote system is private and likely behind a "home router". Since the idea is to get to the remote system w/o having the customer configuring the port forwarding on his router, this is basically dead-end. By default, no port is ever forwarded on those systems and the OP is right in his assessment that UPnCrap will be disabled in an increasing amount of cases.

@vipinbalakrishnan, you need a route to the remote system, if the remote system is behind a node that blocks this route, the *only* way is to make use of an external service which the remote system can first establish a connection to (eg. entering a common VPN)
There is no other way.

vipinbalakrishnan · 2018-07-26 13:49:54

Please find the explanation as a image.

@seth How to setup common VPN. Do you have any link to suggest.

https://drive.google.com/file/d/1LMn5Nt … sp=sharing

seth · 2018-07-26 13:51:40

https://wiki.archlinux.org/index.php/OpenVPN

Edit: just for the records, what you're about to do (if this is really what you intend) is *absolutely* discouraged here. You're about to install archlinux for users who cannot be expected to configure their router. That's a a complete disservice, because you're presenting them with a system that they absolutely cannot handle. (And from your recent posts, you are rather struggeling yourself)

Last edited by seth (2018-07-26 13:54:09)

vipinbalakrishnan · 2018-07-26 13:57:33

Thanks for the link seth. If I make both System1 and system2 connect to Open VPN. I can do a ssh without any issue? Can I make the vpn traffic only for the SSH connection. Other downloads and all go through the normal ISP1 internet?

loqs · 2018-07-26 14:03:05

You would need the systems to connect to an OpenVPN server that allows clients to pass traffic between each other.
You could also use ssh to create a tunnel from each system to a server in both scenarios you would need to run a custom server that has a permanent open internet connection.

vipinbalakrishnan · 2018-07-26 14:04:44

Hi Seth Thanks for the information, The user who is there in system1 is using Ubuntu. And he/she want to come to arch Linux. Yes correct, I am very new to arch Linux. Now I am really liking My arch Linux system. Previously I was also using Ubuntu and Linux mint. But I like philosophy of arch Linux now.

Next point is he/she know to do configuration in router. But I thought of using this live CD for general purpose. For any type of troubleshooting.

Trilby · 2018-07-26 14:26:28

vipinbalakrishnan wrote:

he/she want to come to arch Linux.

If this is true, why are you robbing them of the opportunity to learn? They should install a normal arch system (not your live iso) then set up ssh. They should ask on these forums if/when they need help setting up their system to be accessed remotely. We can help them do something simple - but right now you are asking us to help you help them do something complicated which also will only prevent them from learning what they need to know.

Although the above paragraph started with "If this is true" which I'm beginning to doubt. Is the friend in question gender-ambiguous? I've never seen someone use "he/she" when talking about a specific acquaintance. What arent you telling us?

Last edited by Trilby (2018-07-26 14:27:16)

vipinbalakrishnan · 2018-07-26 16:49:31

@Trilby ,I can answer to the questions you asked. We both learn things together. I put on this forum does not mean . My friend does not learn what I did. Till now from past experience of my Linux I always share with everyone. I respect everyone who is there in this forum also. The person who ask me help. I know he did not put the post for help. But he knows I am doing this.

It was my idea to do this and do a live CD, connect from internet, and he also agreed to do it. So that we both can learn this. Again I might not be able to help him for all. One day definitely he will come like me and ask questions here. It is his thought , I can't questions on it. It took for me sometime understand very little about arch Linux . Till that what I know i will definitely help. There is nothing to hide here.

He/She use ==> Nothing like that. I just used it for conversion. I am not a native English speaker. If it is not correct I will not use it. Thanks for correcting me.

I request , to understand my words polity . It does not mean to hurt anyone in this forum. I respect everyone who helped me on , even a very simple questions. Because for me it is new and big.

Last edited by vipinbalakrishnan (2018-07-26 17:30:14)

progandy · 2018-07-26 17:20:21

loqs wrote:

You could also use ssh to create a tunnel from each system to a server in both scenarios you would need to run a custom server that has a permanent open internet connection.

You can also create a reverse ssh tunnel from the remote ("server") system to a broker and use it to set up port forwarding for the ssh server. Then use ssh on the client and connect to the domain and port given to you by the broker.
Some examples are sshreach.me, portmap.io or openport.io that provide openvpn or reverse ssh end points for port forwarding. You might have to pay a monthly fee if the free plans are too limiting, though.

vipinbalakrishnan · 2018-07-26 21:22:50

Thanks progandy. I think it solve my problem. Thank you so much for the help @Trilby @loqs @seth @x33a. Have a good day.

Arch Linux

#1 2018-07-26 08:53:22

Accessing machine from internet when booted with Archiso [SOLVED]

#2 2018-07-26 10:31:40

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#3 2018-07-26 10:33:14

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#4 2018-07-26 13:24:34

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#5 2018-07-26 13:29:28

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#6 2018-07-26 13:34:25

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#7 2018-07-26 13:37:46

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#8 2018-07-26 13:49:54

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#9 2018-07-26 13:51:40

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#10 2018-07-26 13:57:33

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#11 2018-07-26 14:03:05

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#12 2018-07-26 14:04:44

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#13 2018-07-26 14:26:28

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#14 2018-07-26 16:49:31

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#15 2018-07-26 17:20:21

Re: Accessing machine from internet when booted with Archiso [SOLVED]

#16 2018-07-26 21:22:50

Re: Accessing machine from internet when booted with Archiso [SOLVED]

Board footer