Re: windows to linux via the internet

From: Frank S. Bernhardt (frank_at_bcsi.ca)
Date: 02/18/04

  • Next message: Nicholas Nam: "RE: Verifying the host fingerprint"
    Date: Tue, 17 Feb 2004 18:06:48 -0500
    To: JM Fraser <jmf@cybertrex.co.uk>
    
    

    Jules

    I've been following this thread for a bit and there are a number of good
    posts but some are quite scary.

    You never ever want to put your shares onto the Internet un-encrypted so
      using ssh is a good thing. Setting up vpn's can be a pain and may or
    may not work depending on what routers the various isps are using (found
    that one out the hard way).

    What I have found works the best for my customers and their various
    configurations is to use cygwin's ssh under windoze to do the encryption
    and Openssh on the Linux box to de-encrypt.

    For example.

    On the Linux server I do:

    ssh -A -f -g -N -v -L 9876:localhost:139 servername

    On the PC I do (after installing cygwin):

    ssh -l username localhost -v -L 139:servername.domainname:9876

    net use x: \\127.0.0.1\sharename

    (make sure you disable file & print sharing on the PC first)

    What this effectively does is to cause windoze to access the sharename
    on the machine with ip address 127.0.0.1, itself. ssh is listening to
    port 139 on 127.0.0.1 and encrypts the session and connects to port 9876
    (or whatever you specify) on the remote Linux server running Samba. ssh
    on the remote server is listening to port 9876 and decrypts the data and
    forwards it to port 139 on the localhost (Reader's Digest (tm) version).

    Notes:

    - You don't need the '-v'; that's for seeing what's going on.

    - If using a firewall (and you should) remember to forward port 9876 (or
    whatever).

    - On the server, put the command in a startup script with a nohup.

    - You can copy the keys to the client to eliminate the password prompt,
    but having the password isn't really such a bad thing especially if the
    client is a laptop that could be 'lost'.

    - Server O/S environments tested are Linux and SCO OpenServer

    - Client O/S environments tested are 2000 Pro, XP Pro (Pro ... now
    there's an oxymoron). I suspect win98 should work too.

    I've used this configuration both inside and outside customers' offices
    on lan, adsl, cable and serial modem connections with much success.

    JM Fraser wrote:
    > I have various W32 clients that I want to connect to a Linux box. I am
    > looking for the following setup:
    >
    > Windows clients, users click on a drive mapping such as J: within
    > Windows Explorer and connect instantly to a Volume on the linux server,
    > via SSH via the internet.
    >
    > Can this be done?
    >
    > with much thanks
    > Jules
    >
    >

    -- 
    Regards
    Frank S. Bernhardt
    b.c.s.i.
    14 Halton Court
    Markham, ON.
    L3P 6R3
    905-471-1691 Voice
    905-471-3016 FAX
    frank@bcsi.ca
    

  • Next message: Nicholas Nam: "RE: Verifying the host fingerprint"

    Relevant Pages

    • Re: RDC port change
      ... As for the SSH, I use SSh myself and for my clients where I can. ... There is a mac client, ... remote control...... ... By the way lol, the problem with the RDC port is fixed, it seems.... ...
      (microsoft.public.windowsxp.work_remotely)
    • Re: FC6 VPN
      ... Subject: FC6 VPN ... Anytime you make a connection between two computers you are using a tcp/ip port. ... If you need to connect to, say a windows share, you would forward your local port to the linux server through the ssh tunnel. ...
      (Fedora)
    • Re: FC6 VPN
      ... Anytime you make a connection between two computers you are using a tcp/ip port. ... If you need to connect to, say a windows share, you would forward your local port to the linux server through the ssh tunnel. ... attacker, but may help you work out that you've got a determined ...
      (Fedora)
    • Re: Secure / Encrypt Terminal Services
      ... SSH port forwarding should work. ... Then connect with your SSH client. ...
      (Focus-Microsoft)
    • Re: making telnet secure
      ... there could arise a problem if i try to use SSH public key ... My telnet server application has its own way of handling ... Can i somehow avoid the client side setup of ... specifying a non-standard port which will forward requests to sshd. ...
      (SSH)