Re: Reverse SSH tunelling
From: Glynn Clements (glynn.clements_at_virgin.net)
Date: 08/28/04
- Previous message: Mathieu Desnoyers: "Re: Reverse SSH tunelling"
- In reply to: Raistlin Majere: "Reverse SSH tunelling"
- Next in thread: cwells_at_geoplan.ufl.edu: "Re: Reverse SSH tunelling"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 28 Aug 2004 08:26:53 +0100 To: Raistlin Majere <raistlin@majere.net>
Raistlin Majere wrote:
> I need some advice .. I have a situation where about fifty servers will
> be located in fifty sites that cannot allow services to be hosted. These
> servers will be in private network space behind firewalls. I can use
> them to 'scp' files out to a common home base server, but sometimes I
> need to access a command line console on these servers. I am thinking of
> having a hourly cron job ssh out to my home base server and leaving that
> tunnel open so that I can access that console, but am looking for the
> specific way of doing this. Security os pf the utmost concern, so I need
> some sort of encrypted tunnel, hence the thought of ssh, but I don't
> know how to do this 'reverse' tunnel... I was also thinking of a 'free
> swan' vpn tunnel ..
If you have root on the remote systems, I would suggest using a real
VPN rather than the sort of ad-hoc mechanisms which others have
suggested. The choice of exactly which VPN is likely to be determined
by what you can get through the firewall; e.g. if it only allows TCP,
then you will be limited to a PPP/SLIP-over-SSH/SSL type VPN.
-- Glynn Clements <glynn.clements@virgin.net>
- Previous message: Mathieu Desnoyers: "Re: Reverse SSH tunelling"
- In reply to: Raistlin Majere: "Reverse SSH tunelling"
- Next in thread: cwells_at_geoplan.ufl.edu: "Re: Reverse SSH tunelling"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|