Re: SSH Port Forwarding and X11 Question !

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If you have problem bypassing X-11 session on your FW this woulb be a
nice option, but take in consideration, that some comercial firewalls
like checkpoint ( I don't know if it happens the same with ..e.g.
netfilter) does not apply state-inspection to X-11 connections and need
to setup a bidirectional rule, from server a to pc C ando from pc C to
server A, like a packet filter.

It is not the principal topic but it might save someone a bit of time.

Thiago LPS wrote:
Ok

now you have to do it

log into your firewall with ssh -X firewall ( the -X is to do a
X-forwarding)

after this... do it:

ssh -X solaris

so.. every GUI that you execute in solaris will be forwarded to
firewall, but the there is one more X-forward on firewall that will
redirect the X-session to your box

this worked with me... :)

remember to set up X-forwarding enable on sshd_config







On 11/14/06, Karun <karunanidhis@xxxxxxxxx> wrote:

Hi Guys !
I have the following problem. I need to know if ssh port forwarding
can be
done for this.

I have Server A (Solaris)which needs to run a grpahics program.
Server A resides behind a Firewall.
Server B (Solaris) has access to Server A through ssh. There is a
Firewall
Rule that was implemented to allow ssh traffic from Server B to Server A.
Both Server A and Server B do not have Graphics monitor attached to it.
I have PC C in which I'm running cygwin (X server). I would like to
display
the grpahics program that is invoked on Server A on my PC C. My PC can
ssh
(using putty) to Server B as they are in the same network.

Obviously, when I export the display on Server A to my PCs IP address,
I'm
getting "Can't open Display" because Server A cannot talk to my PC
directly.

Thanks very much for your input.

--
View this message in context:
http://www.nabble.com/SSH-Port-Forwarding-and-X11-Question-%21-tf2632425.html#a7347094

Sent from the SSH (Secure Shell) mailing list archive at Nabble.com.





-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFYrG4jKoWsBzmW8oRAi9OAKDa0wwvvizdo5DQxVmChrYCaYVeVwCgrF0L
B+kPRedJXCQ8tAzw4RMasbg=
=a1bB
-----END PGP SIGNATURE-----

Relevant Pages

  • Re: CEICW fails at firewall config
    ... Do you or do you not have ISA 2000 or ISA 2004 installed on the SBS server? ... Do you have 2 NICs in the SBS? ... CEICW fails on firewall configuration every time. ... >>> Call to Creating the protected networks access rule returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: need help for setting SSH Server for Windows XP
    ... In my windows firewall proper ports are opened. ... Changing from port 22 to ports 80, 443 also doesn't give any results. ... static LAN IP of the server PC. ... It is *NOT* a valid test to call the SSH server PC from another ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Recycler security issues on IIS server
    ... > latest upates to the server. ... > like to see the server put behind our firewall, ... other software, install all patches, IISlockdown, URLscan, use the correct ... the procedures you follow may vary depending on your security needs. ...
    (microsoft.public.inetserver.iis.security)
  • Re: ssh security question
    ... Someone is attempting to use a dictionary or brute-force attack against your SSH server. ... Recently - I was away from the office - and enabled port 22 on the firewall - so I could access the centos server remotely. ...
    (SSH)
  • Re: ISA SERVER NOT STARTING
    ... I delete the nat/basic firewall and stop and started the RRAS an tried to ... There were no critical events in the DNS Server Log in the last 24 hours. ... An error occurred during logon ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)