www.zeroshell.org

ksrimoungchanh · Joined: 12 Mar 2009 Posts: 21

Hello All:

I was accessing my ZS via HTTPS, when I had I accidentally created a "Virtual Server" using port 443.

It has now locked my out. I cannot SSH or Telnet in.

Is there any other way to access it. The ZS is across the country, so it would be hard for me to console in.

Thanks in advance,

Kou

atheling · Joined: 24 Sep 2009 Posts: 212

Do you have a VPN setup? If so then depending on how you have things configured you might be able to SSH or HTTPS in from within the LAN.

I have both a SSH and HTTPS "virtual server" setup on my system but the mappings for that only work from the Internet. If you SSH or HTTPS the ZeroShell box from within the LAN or VPN you have full access.

ksrimoungchanh · Joined: 12 Mar 2009 Posts: 21

Hello Atheling,

I created a rule as "Any interface/Any IP" so I assume when I tried using a Putty to SSH and telnet it failed to both the internal IP address of the LAN and the IP address of the VPN tunnel on that side.

Should I try something else?

Kou

ppalias · Joined: 17 Dec 2008 Posts: 1151 Location: Athens, Greece

If you have forwarded port 443 and locked out SSH(telnet is not running) I am afraid you'll have to use the console to revert the changes.
The command to see the rules for port forward on the console is

ksrimoungchanh · Joined: 12 Mar 2009 Posts: 21

Hello All:

As ppalias recommended, I was able to walk a remote user through connecting a monitor and keyboard on the ZS out there. I then walked the user through the instructions from ppalias and it works.

I then went into ZS and removed it from the HTTPS part to make sure it would not come back after a reboot.

Thanks all for the suggestions and help.

Kou