<br><br><div class="gmail_quote">2012/9/30 Tiansworld <span dir="ltr"><<a href="mailto:tiansworld@fedoraproject.org" target="_blank">tiansworld@fedoraproject.org</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="HOEnZb"><div class="h5">On 09/30/2012 01:54 PM, cornel panceac wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
is there a way to enable ssh on f18? i tried enable/disable, start/stop<br>
firewalld/iptables.service, and even lokkit --enabled (which responded<br>
with: ERROR: FirewallD is active, please use firewall-cmd.)<br>
<br>
<br>
<br>
</blockquote></div></div>
Please make sure you have installed ssh first.<br>
For you to ssh a remote host, you should install openssh-clients.<br>
For people you want to ssh your machine, then you should install openssh-server as well.<br>
You may run this to check:<br>
rpm -qa|grep ssh<br>
<br>
If you have the software packages installed, you can use ssh directly.<br>
If you want others to ssh your machine, you should make the sshd service available, and make sure the firewall is set to trust ssh service.<br>
Use command: systemctl enable sshd.service to enable sshd service.<br>
Use system-config-firewall to adjust trusted services.<br>
<br>
Hope these procedures can help you.<span class="HOEnZb"><font color="#888888"><br>
</font></span><br></blockquote></div>thank you , Tiansworld. here's the status:<br><br>ssh is installed ans sshd is running. ssh connections do not work if:<br><br>"firewalld.service is running and iptables.service is not"<br>
<br>or<br><br>"iptables.service is running and firewalld.service is not"<br><br>or<br><br>"both iptables.service and firewalld.service are not running"<br><br>all this time, ip6tables.service is stopped.<br>
<br>when both services are stopped, nmap localhost (on server) shows ssh port is open (and also other ports), but nmap <server_ip> (on client) shows no port is open. as far as i can tell, iptables -L pretends input is on ACCEPT anywhere, etc.<br>