I'm trying to connect from a PC behind my Firewall to a 837 router on the Internet The router can accept only ssh connections and only from a particular subset of public IP addresses. It can not accept telnet connections. When trying to connect via telnet I obtain "Connection refused" and it is correct. But when trying to connect via ssh on the PIX syslog I see the following.
Apr 6 11:59:08 fw-ts-itbs-area.italtbs.com %PIX-6-106015: Deny TCP (no connection) from /7 to /1119 flags SYN ACK on interface Tunn_Estero_Endpoint Apr 6 11:59:11 fw-ts-itbs-area.italtbs.com %PIX-6-106015: Deny TCP (no connection) from /7 to /1119 flags ACK on interface Tunn_Estero_Endpoint Apr 6 11:59:11 fw-ts-itbs-area.italtbs.com %PIX-6-106015: Deny TCP (no connection) from /8 to /1119 flags SYN ACK on interface Tunn_Estero_Endpoint Apr 6 11:59:16 fw-ts-itbs-area.italtbs.com %PIX-6-106015: Deny TCP (no connection) from /7 to /1119 flags ACK on interface Tunn_Estero_Endpoint Apr 6 11:59:16 fw-ts-itbs-area.italtbs.com %PIX-6-106015: Deny TCP (no connection) from /8 to /1119 flags SYN ACK on interface Tunn_Estero_Endpoint Apr 6 11:59:22 fw-ts-itbs-area.italtbs.com %PIX-6-302014: Teardown TCP connection 12073769 for outside:/22 to inside:192.168.31.157/1414 duration 0:02:01 bytes 0 SYN Timeout Apr 6 11:59:27 fw-ts-itbs-area.italtbs.com %PIX-6-106015: Deny TCP (no connection) from /8 to /1119 flags SYN ACK on interface Tunn_Estero_Endpoint
I think the problem is on the router but I would troubleshoot the problem seeing the syslog messages.
May anyone help me? What do the messages mean? It seems to me the router can not connect to the PIX but I don't know why.
Thanks,
Alex