Re: Port Forwarding - Firewall Traversal

I don't know about THIS situation as I don't know Oracle but port
forwarding HTTP (port 80 or even 443) is TOTALLY ssh port forwarding
friendly. The ONLY problems you might have are DNS, where the server
expects the request to say "www.foo.com" instead of "localhost" but
even that can be hacked with an edit in your hosts file.

I've port forwarded port 80 lots of times with SSH with no problems.

Scott

Pierre Neyron wrote:
It's not working. I can see in the firewall log that it allows the
first packet to go to the app.server on port 9000 and it drops the
second packet that goes for some reason to the app.server on port 1810.

The HTTP protocol is not ssh port fwding friendly.

Am I missing anything?

Thanks,
- - - - - - - - - -
Henry


app.server being a linux (?), I think it may be worth trying to use an
iptables rule instead of ssh fwding (but needs root privileges):
# iptables -t nat -A PREROUTING -s your-work-station -d appserver -p tcp
--dport 9000 -j REDIRECT --to-port 1810

another idea:
on appserver:
# ssh -D 9000 -g appserver
then configure appserver:9000 as a socks proxy server in firefox on your
workstation.

Regards,
Pierre



--
Scott Baker - RHCE
Canby Telcom System Administrator
503.266.8253

Relevant Pages

  • Re: Ive been hacked, found mldonkey running
    ... I had an open FTP port which I normally keep closed but I ... The machine that was compromised with mldonkey is running ... Is it possible to get through an ssh port if RSA ...
    (comp.os.linux.security)
  • Re: SSH
    ... I changed my SSH port from 22 to something else. ... But from the new Linux box I cannot ping my Windows box OR even ...
    (comp.os.linux.misc)
  • Re: SSH
    ... I changed my SSH port from 22 to something else. ... box.....from the new Linux box I can ping my older Linux box. ... Windows system, you either need the DNS service set up and resolving ...
    (comp.os.linux.misc)
  • Re: SSH
    ... I changed my SSH port from 22 to something else. ... box.....from the new Linux box I can ping my older Linux box. ... Windows system, you either need the DNS service set up and resolving ...
    (comp.os.linux.misc)
  • Re: SSH Cracking Attempts
    ... about protecting your computer using a port knocking system. ... remember correctly, you can close a port (your SSH port, for example) ... IP-adress that performed the knocking sequence. ...
    (Debian-User)