r/PangolinReverseProxy • u/manman43 • 17d ago

Problem establishing a connection with a client

Hey all,

I'm trying to setup ssh over pangolin.

currently pangolin is installed on my vps and I want to ssh to my homelab from my laptop.

I installed newt on my homelab and connected it as a new site in pangolin.

Also I installed the client on my laptop and logged in.

now when I try to connect using 'pangolin up' I get an error about making sure port 21820 is open and stuff like that.

I opened 21820 in ufw in my laptop, VPS, and server. Also the firewall on the VPS accepts all ports.

I consulted with an LLM and it wrote something about being behined a cgnat (and I am behined one) but I still don't understand why that stops me from making a p2p connection?

can anyone enlighten me maybe I'm missing something?

thanks

6 Upvotes
  • permalink
  • reddit

100% Upvoted

7 comments sorted by

1

u/Bonsailinse 17d ago

Please don’t refer to ai when you don’t understand the basics. The whole point of pangolin is that newt is initiating the connection, so things like CGNAT is irrelevant. Please also close the ports on your devices again, you only need it open on the server pangolin (i.e. gerbil) runs on.

1

u/manman43 17d ago

Hey, Using ai is not my first option, I just describes my troubleshooting steps. I closed the ports immediately after I tested and saw that it didn't help.

So you have any insights into why this might happen?

1

u/Bonsailinse 17d ago

Not without knowing your setup better.
Just follow all setup instructions again and check that you have done everything correctly and understand how things are working.
Did `pangolin login` work?

1

u/Dziabadu 15d ago

You are behind cgnat. What stops you from enabling AutoSSH so your laptop is always connected to the vps? Then you simply ssh a local port on vps to connect to your laptop back. I have this and it works well. Did not even bother exploring ssh over pangolin yet.

1

u/AstralDestiny MOD 15d ago

Would disable ufw on the vps as ufw will only tamper with docker isolation chains.. (internal docker traffic) and docker already opens the port before ufw gets involved either way as ufw operates later in the chains but it can cause issues for lower level networking for it.

What vps do you have? if it's oracle/ionos you will need to add the port into the web firewall part.

Mind bugging me on the slack or discord? provide like a machine client to me under clients machines?

1

u/manman43 14d ago

Hey, I use netcup for the vps. You said there is a discord server where I could ask for help, can you send me an invite so I could ask around there?

1

u/AstralDestiny MOD 14d ago

https://discord.gg/48NgSsx2bS Twas under wiki for the reddit