Skip to content

RDKB-62412 LAN SSH dropbear allows wan SSH#191

Open
umasankar098 wants to merge 7 commits intordkcentral:developfrom
umasankar098:RDKB-62412_utopia
Open

RDKB-62412 LAN SSH dropbear allows wan SSH#191
umasankar098 wants to merge 7 commits intordkcentral:developfrom
umasankar098:RDKB-62412_utopia

Conversation

@umasankar098
Copy link

No description provided.

Signed-off-by: usi096 <umasankar.srinivasan@sky.uk>
@umasankar098 umasankar098 requested review from a team as code owners January 27, 2026 07:31
Signed-off-by: usi096 <umasankar.srinivasan@sky.uk>
Signed-off-by: usi096 <umasankar.srinivasan@sky.uk>
Signed-off-by: usi096 <umasankar.srinivasan@sky.uk>
Signed-off-by: usi096 <umasankar.srinivasan@sky.uk>
Signed-off-by: usi096 <umasankar.srinivasan@sky.uk>
guto86
guto86 previously approved these changes Feb 18, 2026
Signed-off-by: usi096 <umasankar.srinivasan@sky.uk>
static int do_block_lan_access_to_wan_ssh(FILE *fp)
{
FIREWALL_DEBUG("Entering do_block_lan_access_to_wan_ssh\n");
fprintf(fp, "-I INPUT 1 -i brlan0 -d %s -p tcp --dport 10022 -j REJECT\n", current_wan_ipaddr);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is 10022 a hard coded ssh port in sky devices? , is it a generic issue or seen only in sky devices?

Also let's not hard code brlan0 interface name , use lan_ifname for private lan

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants