Re: How do I connect two machines that are both behind seperate firewalls

From: Volker Birk (bumens_at_dingens.org)
Date: 10/30/05 

Date: 30 Oct 2005 13:35:09 +0200

Darrel Yurychuk <usenet@dmyurych.ca> wrote:
> Here is my situation, I want to establish a connection between two
> machines via ssh, however both the target and destination machines are
> behind firewalls, neither of which I have any control over. I do
> however have complete control over both machines.

Initiate the TCP connection from both sides at the same time. More about
this topic you'll find in RFC 793, 3.4 Establishing a connection.

If the firewalls are implementing NAT as an addition, then try to punch
holes into it like i.e. skype does:

http://reports-archive.adm.cs.cmu.edu/anon/isri2005/CMU-ISRI-05-104.pdf

If the firewalls are blocking outgoing SSH, too, then try to fake an SSL
connection i.e. with corkscrew.

If this will not work, you have to use tunneling.

Yours,
VB. 

-- 
"Ich bin ein freier Mensch und werde jetzt von meinen Freiheitsrechten
Gebrauch machen - und zwar ausgiebig - natürlich nur in dem Rahmen, den
Otto Schily mir noch zur Verfügung stellt."
                   Wolfgang Clement am 10.10.05 als Noch-Superminister

Relevant Pages

  • Re: get into the private campus server
    ... Once the ssh connection is established, ... tunnel any TCP traffic you like over it, ... the connection over the long term, ... Application-level firewalls expect HTTPS traffic there, ...
    (comp.os.linux.networking)
  • Re: More on caching and logging
    ... Please point to a citation of where, exactly, Apple said any such thing. ... PPC machines are still the majority of Macs, ... By the end of the first year I had that machine, ... single-button, and the connection was still proprietary, but the ADB ...
    (comp.sys.mac.system)
  • Re: Aborted/dead network connections and other oddities
    ... Once this was done operation of the FTP server returned to ... and seemingly locking out machines. ... > or 30) and then the connection will abort. ...
    (comp.os.linux.networking)
  • Re: More Peer 2 Peer Troubles
    ... Only the Host has been connected to the internet, ... all machines, not just the host. ... Have you enabled ICS on the host's Bigpond connection? ...
    (microsoft.public.windowsxp.network_web)
  • Re: DSL Upgrade
    ... Discussions so far appear to be centered around hubs but since true hubs are just a means of connecting various machines on a LAN with no nat abilities they will not work in this case without the public id's mentioned. ... A router, Linksys BEFSR11, 1 port in and 1 out to your cable/dsl modem, or BEFSR41 with 4 ports, for your LAN computers, and 1 port out to your cable/dsl modem which will allow connection to 4 machines. ... If you connect 1 port for a LAN machine to a larger switch or hub more machines can be handled. ...
    (microsoft.public.win2000.networking)
Loading