Connect to router winbox over ssh tunnel

RouterOS General
1

I am trying to use an ssh tunnel to my router, then open winbox using that tunnel, however i cant seem to get ssh tunnels to work properly. I enabled ssh forwarding in both directions, but that didnt seem help. is there a listen address configured anywhere for winbox? I added an allow rule to the firewall for any not destined to my wan address to allow winbox, which should take care of any firewall problems if it was that.

I am using the command

ssh admin@192.168.88.1 -L 8291:192.168.88.1:8291

from my linux machine to do this, which should work, i also tried for the web interface with no luck. what am i missing?

2

Works for me. RouterOS accepts WinBox connections by default, so if you didn’t limit access in “/ip services”, didn’t block it using firewall, or aren’t doing some mistake on client side, it should work for you too.

Make this your first mangle rule and you’ll see if any connection attempt reaches the router:

/ip firewall mangle
add action=log chain=prerouting connection-state=new dst-port=8291 protocol=tcp
3

The mangle rule pointed me in the right direction

It was being blocked by the default drop all !LAN. The connection comes in on localhost (which should be obvious, but I was to close to it haha)