DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:subject:to:message-id:date:mime-version
	:content-type:content-transfer-encoding; q=dns; s=default; b=yMu
	qKb7xXMw6+BY3FC5L4NOEl2SjbNmbPS5uN0H5YVvKjcZZx+R5+YYcUzL6tYPvH9+
	YX4LRkZTlsT3X2dShmlZ84ZcZwKlWJjtC715tXQKGRS5CtSFiQzTo68b3SGyuwpP
	YIBYK2n9fyLWxTufHGOjK6mBcbQtEa/lVxDlQ5cM=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
From: mike <mikereape@onetel.com>
Subject: sshd and PuTTY and Windows firewall
To: "cygwin@cygwin.com" <cygwin@cygwin.com>
Message-ID: <c02dd764-289a-af6f-2bfb-6f3f67edcfb7@onetel.com>
Date: Sat, 7 Jan 2017 19:06:31 +0000
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.6.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit

Hi

First I'm using the Windows firewall in Windows 7 on a laptop and it is 
switched on.

I'm not sure whether this is a Cygwin question or not but I don't know 
where else to ask and it's driving me nuts.  If I use the PuTTY app to 
connect to 192.168.1.100 it connects (where 192.168.1.100 is the local 
address behind and through my router). (Using Cygwin ssh 192.168.1.100 
fails because of host key problems but that's a different issue.)  So 
surely (he says) if I can use PuTTY to connect to the Cygwin sshd server 
at 192.168.1.100 then the connection is routed through my router and is 
not local to the machine as in loopback with ssh localhost in that 
sense.  However if I open the Windows Firewall with Advanced Security 
dialogue I cannot find any Windows firewall inbond rules that allow 
Cygwin SSH through (or anything similar).  The domain, private and 
public profiles all say "Inbound connections that do not match a rule 
are blocked".  Therefore the inbound connection through my router should 
be blocked.

I'm worried that I might have a security hole somewhere.  I don't want 
sshd open to the world just local to other machines on my local network 
(behind the router).  This is a concern because since the machine is a 
laptop I might connect to the net with wifi in a coffee shop for example.

Can someone give me a clue as to what's going on please?  What am I 
looking for?  i'm sure I must just be missing the obvious.

Thanks very much in advance

Mike


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple