I have two NS7 servers, one is running on a server farm as a VPS, the other is at home and works with two network cards (LAN and WAN) as a backup. The VPS uploads the backup to this with sftp. There is nothing else configured on it except Nextcloud and vsftpd, no users, LDAP or Active Directory, samba share, etc.
Just a few of Nextcloud’s own users and ssh so that sftp works.
Unfortunately, the second (WAN) network card is broken, so the VPS cannot connect to the NS7 at home with vsftp. I don’t have another network card at home and since it is a holiday and a long weekend here, I can only look into ordering one on Monday next time, but it will take 2-3 days for it to be delivered.
The server here worked so that the WAN and LAN interfaces were organized in separate VLANs, but both are connected to the router and in principle have access to the internet. The difference is that the port forwarding is set to the WAN interface. I need a temporary solution, so I have port forwarding to the LAN port, but I can’t access the LAN port from the internet with ssh. SSH is enabled on the Green (LAN) port.
I tried the suggested solution, removed the RED network interface and added the gateway to the GREEN interface. Unfortunately, despite all this, I still can’t access NS7 from the internet via ssh.
I directed traffic to the GREEN interface on the router, I can access it on the local LAN, but not from the internet. This is important because the backup is done from the VPS to the NS7 at home via sftp and we are still working, we will need the backup…
There is no AD configured, so it shouldn’t cause any problems. The network setup looks like this:
Maybe because the red role is still there. Please try to set the role property to none.
Other points:
Please recheck if the port forwarding is correct, it should point to the IP of the green interface.
Maybe it’s a VLAN issue, you could try to remove the VLAN for testing.
There is not a single firewall rule in db fwrules.
I posted my network setup earlier. I installed two physical network cards in the NS7, they were configured separately, there is no VPN and therefore no virtual bridge interface.
This is just an sftp backup and home nextcloud server, nothing else is configured. I forgot, when one of our programs’ Firebird server was updated to 3.x, this was the test server where both Firebirds were running and converting the databases, but this is also disabled now.
@mrmarkuz There is no RED interface, so I restricted access to GREEN interface because that was the logical thing to do. I also enabled sshd on RED interface. Now the sshd config looks like this:
