Josh: Major update - troubleshooting guide: SSH Port Forwarding - Quick Start Guide (25 sections)

2026-01-01T13:44:33Z

Major update - troubleshooting guide: SSH Port Forwarding - Quick Start Guide (25 sections)

← Older revision		Revision as of 13:44, 1 January 2026
Line 1:		Line 1:
	~~= SSH Port Forwarding - Quick Start Guide =~~

	== What Changed? ==		== What Changed? ==

Line 40:		Line 38:
	=== Example: Add a Raspberry Pi ===		=== Example: Add a Raspberry Pi ===

	= '''Verify the device is on VPN:''' =		==== '''Verify the device is on VPN:''' ====
	<pre class="lang-bash">		<pre class="lang-bash">
	# Check if device is connected		=== Check if device is connected ===
	cat /etc/openvpn/server/ipp.txt		cat /etc/openvpn/server/ipp.txt
	ping -c 2 10.8.0.3 # Replace with your device's VPN IP		ping -c 2 10.8.0.3 # Replace with your device's VPN IP
	</pre>		</pre>

	= '''Add the port forward:''' =		== '''Add the port forward:''' ==
	<pre class="lang-bash">		<pre class="lang-bash">
	sudo ssh-forward add raspberrypi 22223 10.8.0.3 22		sudo ssh-forward add raspberrypi 22223 10.8.0.3 22
	</pre>		</pre>

	= '''Verify it's active:''' =		== '''Verify it's active:''' ==
	<pre class="lang-bash">		<pre class="lang-bash">
	sudo ssh-forward list		sudo ssh-forward list
	</pre>		</pre>

	= '''Test from external location:''' =		== '''Test from external location:''' ==
	<pre class="lang-bash">		<pre class="lang-bash">
	ssh -p 22223 user@87.106.61.62		ssh -p 22223 user@87.106.61.62
	</pre>		</pre>

	= '''Configure IONOS firewall:''' =		== '''Configure IONOS firewall:''' ==
	* Log in to https://dcd.ionos.com/		* Log in to https://dcd.ionos.com/

Line 72:		Line 70:

	<pre class="lang-bash">		<pre class="lang-bash">
	= List all SSH port forwards =		=== List all SSH port forwards ===
	sudo ssh-forward list		sudo ssh-forward list

	= Add a new device =		== Add a new device ==
	sudo ssh-forward add <name> <external_port> <vpn_ip> [ssh_port] # Remove a device		sudo ssh-forward add <name> <external_port> <vpn_ip> [ssh_port] # Remove a device
	sudo ssh-forward remove <name>		sudo ssh-forward remove <name>

	= Reapply all forwards (after manual config edit) =		== Reapply all forwards (after manual config edit) ==
	sudo ssh-forward apply		sudo ssh-forward apply
	</pre>		</pre>
Line 110:		Line 108:
	=== Port forward not working? ===		=== Port forward not working? ===

	= Check device is on VPN: =		==== Check device is on VPN: ====
	<pre class="lang-bash">		<pre class="lang-bash">
	ping -c 2 <vpn_ip>		ping -c 2 <vpn_ip>
	</pre>		</pre>

	= Verify rules exist: =		== Verify rules exist: ==
	<pre class="lang-bash">		<pre class="lang-bash">
	sudo ssh-forward list		sudo ssh-forward list
Line 121:		Line 119:
	</pre>		</pre>

	= Reapply rules: =		== Reapply rules: ==
	<pre class="lang-bash">		<pre class="lang-bash">
	sudo ssh-forward apply		sudo ssh-forward apply
	</pre>		</pre>

	= Check IONOS firewall allows the port =		== Check IONOS firewall allows the port ==

	=== Need more help? ===		=== Need more help? ===

Josh: Added troubleshooting guide: SSH Port Forwarding - Quick Start Guide

2026-01-01T13:28:06Z

Added troubleshooting guide: SSH Port Forwarding - Quick Start Guide

New page

= SSH Port Forwarding - Quick Start Guide =

== What Changed? ==

The SSH port forwarding system has been refactored from hardcoded iptables rules to a flexible, configuration-driven system. This makes it easy to add SSH access to multiple devices on your VPN.

=== Before ===
* Hardcoded iptables rules in <code>/etc/iptables/rules.v4</code>

* Manual rule management

* Difficult to add new devices

=== After ===
* Configuration file: <code>/etc/ssh-port-forwards.conf</code>

* Management script: <code>ssh-forward</code> (or <code>ssh-port-forward-manager.sh</code>)

* Easy to add/remove devices

* Automatic rule application

== Your Existing Setup ==

Your Synology NAS SSH forward has been migrated automatically:
* '''Device''': synology

* '''External Port''': 22222

* '''VPN IP''': 10.8.0.2

* '''SSH Port''': 22

* '''Access''': <code>ssh -p 22222 user@87.106.61.62</code>

'''No changes needed''' - everything continues to work as before!

== Adding a New Device ==

=== Example: Add a Raspberry Pi ===

= '''Verify the device is on VPN:''' =
<pre class="lang-bash">
# Check if device is connected
cat /etc/openvpn/server/ipp.txt
ping -c 2 10.8.0.3 # Replace with your device's VPN IP
</pre>

= '''Add the port forward:''' =
<pre class="lang-bash">
sudo ssh-forward add raspberrypi 22223 10.8.0.3 22
</pre>

= '''Verify it's active:''' =
<pre class="lang-bash">
sudo ssh-forward list
</pre>

= '''Test from external location:''' =
<pre class="lang-bash">
ssh -p 22223 user@87.106.61.62
</pre>

= '''Configure IONOS firewall:''' =
* Log in to https://dcd.ionos.com/

* Navigate to: Server & Cloud → Servers → [Your VPS] → Firewall

* Add rule: TCP port <code>22223</code> → Allow

== Common Commands ==

<pre class="lang-bash">
= List all SSH port forwards =
sudo ssh-forward list

= Add a new device =
sudo ssh-forward add <name> <external_port> <vpn_ip> [ssh_port] # Remove a device
sudo ssh-forward remove <name>

= Reapply all forwards (after manual config edit) =
sudo ssh-forward apply
</pre>

== Port Recommendations ==

* '''22222-22299''': Reserved for SSH port forwards

* '''22222''': Synology NAS (already in use)

* '''22223+''': Available for new devices

== Configuration File ==

Location: <code>/etc/ssh-port-forwards.conf</code>

Format:
<pre>
device_name:external_port:vpn_ip:ssh_port
</pre>

Example:
<pre>
synology:22222:10.8.0.2:22
raspberrypi:22223:10.8.0.3:22
</pre>

== Troubleshooting ==

=== Port forward not working? ===

= Check device is on VPN: =
<pre class="lang-bash">
ping -c 2 <vpn_ip>
</pre>

= Verify rules exist: =
<pre class="lang-bash">
sudo ssh-forward list
iptables -t nat -L PREROUTING -n | grep <external_port>
</pre>

= Reapply rules: =
<pre class="lang-bash">
sudo ssh-forward apply
</pre>

= Check IONOS firewall allows the port =

=== Need more help? ===

See the complete documentation: [SSH Port Forwarding Management](index.md)

----

'''Quick Reference''': <code>ssh-forward</code> or <code>/usr/local/bin/ssh-port-forward-manager.sh</code>

[[Category:Documentation]]
[[Category:Documentation/SSH Port Forwarding]]

SSH Port Forwarding:Quickstart - Revision history

Josh: Major update - troubleshooting guide: SSH Port Forwarding - Quick Start Guide (25 sections)

Josh: Added troubleshooting guide: SSH Port Forwarding - Quick Start Guide