Re: Is there an SSH client which will tunnel ALL ports (TCP & UDP)?
From: Paul Adams (paul.adams@thecheshire.WANTSNOSPAM.co.uk)Date: 07/01/02
- Next message: Brian Lewis: "Re: Conseal Personal Firewall 2.05 query"
- Previous message: Paul Adams: "Re: Is there an SSH client which will tunnel ALL ports (TCP & UDP)?"
- In reply to: those who know me have no need of my name: "Re: Is there an SSH client which will tunnel ALL ports (TCP & UDP)?"
- Next in thread: : "Re: Is there an SSH client which will tunnel ALL ports (TCP & UDP)?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Paul Adams <paul.adams@thecheshire.WANTSNOSPAM.co.uk> Date: Mon, 01 Jul 2002 09:25:25 +0100
On 01 Jul 2002 02:26:52 GMT, those who know me have no need of my name
<not-a-real-address@usa.net> wrote:
>>Is there any SSH client which, on running and connecting to an SSH
>>server, will actually tunnel ANY traffic bound out of the client
>>through the SSH connection?
>
>no, and it's not even possible the way that sshd's are currently written,
>e.g., port 22 can't be tunneled because the other end-point already has it
>open. (your end might too.)
Yeah, I guessed that ports in use could not be forwarded.
I meant more along the lines of forwarding all other ports, or
specifying a range of ports rather than a rule for individual ones.
>it's time for you to move beyond ssh, to a vpn. perhaps ipsec is available
>for both ends. since you are posting to a firewall group i'll assume that
>you have such a thing (at both ends?), and say that the documentation for
>it/them is the right place to start.
VPN is our long-term goal, using token authentication, 3DES VPN and
static IP addresses.
I just wanted a quick & dirty solution short-term.
>>And I can't find any client which will intercept *outbound* traffic
>>and route it through an SSH tunnel.
>
>that's because that's not what ssh was designed to handle.
Bugger.
What I was actually aiming for is the ability to forward all traffic
from a PC behind a (couple of) firewall(s) through a single port to a
remote PC, then have the remote PC forward the packets on to their
real destination, and route the replies back.
I was hoping to avoid using VNC via SSH or something, as I wanted the
applications to run on the firewalled PC itself.
Nay matter, thanks for the info.
-- Paul Adams Infrastructure & Security Analyst
- Next message: Brian Lewis: "Re: Conseal Personal Firewall 2.05 query"
- Previous message: Paul Adams: "Re: Is there an SSH client which will tunnel ALL ports (TCP & UDP)?"
- In reply to: those who know me have no need of my name: "Re: Is there an SSH client which will tunnel ALL ports (TCP & UDP)?"
- Next in thread: : "Re: Is there an SSH client which will tunnel ALL ports (TCP & UDP)?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|