Win7 Firewall won't allow SSH or FTP

[v1nsai]

Hello all first post here, I've got an issue that's been driving me crazy. I've installed MobaSSH and the windows firewall absolutely refuses to let it through. I've taken down the firewall and everything works fine, so I know its the firewall. Same problem with a Serv-u FTP server but I'm not as worried about that as I am the SSH server. MobaSSH adds itself as a service, so while it was running I found the process and made sure that it was added to the firewall, I can find nothing else to add to exceptions.

I haven't found much in terms of firewalls for Windows 7, so I would prefer to get this to work instead of switching firewalls, but if someone can recommend a good one thats fine too. Thanks for any input

 

[Generator]

Incase you havn't tried it:

If you're adding the FTP servers to the firewall rules via pointing it to the actual '.exe' files try adding the FTP port instead or even aswell as.

If that fails, have you tried different port numbers just incase there's some weird conflict going on inside the firewall.

 

[fseal]

Moba SSH is a server right?

You definately have to hand open ports to allow acess IN through the firewall then. I believe that adding the exe to the firewall list is mainly just to "ok" programs that are local that are trying to connect outward. When inbound, the firewall has no idea what program an incoming request is for, only what port is trying to be opened, so you need to specifically open the SSH inbound port in the firewall.

 

[v1nsai]

I guess I figured the firewall would read my thoughts and understand what port I wanted open. Stupid MS. Thanks for the help though, glad it was an easy fix.

 

[fseal]

Ha.

Actually, now that I think about it, it seems like it certainly COULD know. Netstat knows... hmm.

 

[jeremyjjbrown]

Full Details

I just read this page and though I would write up a complete answer for when someone else reads this.

In order to pass windows firewall with SSH FTP or whatever you need to do the following.

1. set an outgoing rule with the path of the .exe your want to to use.
IE C:\Program Files (x86)\MobaSSHServer\MobaSSH_Server_Home_1.53

2. set an incoming rule with the same path.

3. open the static port the app uses.
IE Telnet and SSH are port 22.

4. If you want to connect from the outside world you will have to set your router to forward the port to the computer that hosts the .exe

5. if your host network and internet connections are configured with DHCP ( the default setting for most Non-Work networks) you need give you computer a static ip in your router settings. You will also need to get a DNS name for your home network so you can find it from the outside world ( dyndns.com is free).

BTW Why are you Windows Engineers morons who can't write a firewall interface that lets you enter all of the setting in one place?

 

[Shootist]

I just read this page and though I would write up a complete answer for when someone else reads this.

In order to pass windows firewall with SSH FTP or whatever you need to do the following.

1. set an outgoing rule with the path of the .exe your want to to use.
IE C:\Program Files (x86)\MobaSSHServer\MobaSSH_Server_Home_1.53

2. set an incoming rule with the same path.

3. open the static port the app uses.
IE Telnet and SSH are port 22.

4. If you want to connect from the outside world you will have to set your router to forward the port to the computer that hosts the .exe

5. if your host network and internet connections are configured with DHCP ( the default setting for most Non-Work networks) you need give you computer a static ip in your router settings. You will also need to get a DNS name for your home network so you can find it from the outside world ( dyndns.com is free).

BTW Why are you Windows Engineers morons who can't write a firewall interface that lets you enter all of the setting in one place?

Or you could just turn the Windows Firewall off and do all this on your router.
Actually there is no need for a software firewall when your PCs are behind a router.
Not sure why MS has included this in Win 7 and made everyone think they need to use it.

 

[jeremyjjbrown]

Not sure why MS has included this in Win 7 and made everyone think they need to use it.

Someone could have their box in the dmz...

 

[Shootist]

Not sure why MS has included this in Win 7 and made everyone think they need to use it.

Someone could have their box in the dmz...

Right and in that case you need a firewall.