So I am using OpenVPN to connect to an internal network. I have some users that require access from a different country (India). I created an SSH user and generated VPN certs for them to connect.
- They are able to connect to the VPN with no issues
- They are able to ping the designated VM via its private static IP address
- I had them do an nmap and they do see port 22 but it says "filtered"
- I've added rules to my firewall appliance (Sophos) to let all incoming SSH traffic through for testing purposes
- They get a connection refused error when trying to connect to SSH
- I can connect just fine using their SSH user (while VPNed from my workstation)
- When I do a nmap from my workstation (in Canada), while VPNed in, I see the state of ssh to be "Open". When they do the same thing from India, they see "Filtered" as the SSH state.
I know that opening up SSH connections is a security issue but I'd prefer to get these guys connected, and then add in the necessary security measures to secure/limit SSH logins (no root password, ssh keys only, etc) after the fact.
I'm a budding sysadmin so sorry if this is total noob territory. Essentially, I need to know what else I can do to diagnose this situation and determine why they are unable to connect. I have a feeling it's firewall related, but I don't have any country blocking enabled, and SSH is wide open so I am unsure what the issue is.