SSH port forwarding/tunneling
Captain Dondo
I have a machine that will be located remotely. I have ssh installed
on this machine. I cannot install any sort of VPN on this machine.
The machine will be behind a firewall, so I need a way to access this
machine.
What I'd like to do is set up a persistent ssh connection to my server,
and then portforward back through this connection so I can connect to the
ssh server on the machine.....
One more time:
machine A is at my desk.
machine B is far, far away.
Machine B connects to machine A via ssh, forwarding some port that
connects back to itself....
I use ssh localhost -p someport on machine A to log into machine B.
I've been playing around with all sorts of ways to try to portforward
using -L and -R, but I always get something that doesn't work or a message
that the port cannot be forwarded.....
I've found all sorts of docs on how to forwards ports if I want to tunnel
in the same direction as the ssh connection, but nothing that tells me how
to tunnel 'backwards'....
TIA,
--Yan
Pascal Bourguignon
[pjb@remote pjb]$ ssh -R 2222:localhost:22 desktop
pjb@desktop's password:
25960: Warning: No xauth data; using fake authentication data for X11 forwarding.
Last login: Mon Oct 31 17:00:59 2005 from other
Welcome to Darwin!
Eat a cookie!
[pjb@desktop pjb]$ ssh -p 2222 localhost
25960: socket: Address family not supported by protocol
pjb@localhost's password:
Have a lot of fun...
[pjb@remote pjb]$
If you have the right access rights on the remote machine, you could
establish a ppp/ssh tunnel. That'd be the simplier to connect back
with different protocols, and to proctect somewhat from ssh
disconnects: if ppp/ssh disconnects, you can still reconnect it
without disconnecting the tcp streams running over this ppp session.
--
__Pascal Bourguignon__ http://www.informatimago.com/
Litter box not here.
You must have moved it again.
I'll poop in the sink.
Sven Boeckelmann
ok, I don't know if i got this right:
You can logon to machine B and create a ssh connection to machine A, which
stays constantly open?
If so, this might work for you, although IMHO the setup you want is kind
of sick. ;-)
1. You need a ssh daemon running on both machines.
on machine B create an ssh connection to machine A
ssh -R 2222:127.0.0.1:22 username@A
now you can connect from machine A to machine B using
ssh -p 2222 username@localhost
beware:
on root can forward privileges ports
this is why I used 2222 in this example
port forwarding not always enabled depending
on your sshd_config check
AllowTcpForwarding yes
Cheers,
Sven