Re: MacSSH port forwarding question

From: T. de Vries (news@kortage.com)
Date: 11/27/02 

From: "T. de Vries" <news@kortage.com>
Date: Wed, 27 Nov 2002 11:04:41 -0500

Lest anyone else run into the problem I posted below a month ago, the answer
is this: you can't tunnel ASIP with MacSSH. It's a programming issue.
MacSSH is asynchronous and only tunnels asynchronous processes, and Apple's
ASIP login is coded synchronous. This is also true for Timbuktu Pro
sessions.

The two solutions are:

1. Buy F-Secure's SSH client for the Mac. It costs $115 from
http://www.fsecure.com and is coded as interrupt-driven so it gets around
the synchronicity issue. It is also a bit faster than MacSSH and somewhat
friendlier for non-technical users. I still prefer MacSSH but my client
chose to go with F-Secure clients (still a Linux server, though).

2. Set up another computer (Mac, PC, whatever) on your local network with a
public (or "guest enabled") SSH port-forward to the ASIP server, then aim
your ASIP logins at that computer. The SSH tunneling is no longer processed
on your Mac, so you get around the problem.

Thanks to Jean-Pierre for his help with this.

tdv

T. de Vries wrote on 10/23/02 11:13 AM:

> Has anybody out there successfully used MacSSH to forward AFP port 548 for
> secure remote access to an ASIP server? POP/IMAP/HTTP/LPR are simple to
> forward (plus FTP via SFTP) but I can't get AFP forwarding to work. I get
> as far as the contacting the ASIP server and having it request a login
> name/password (e.g. after entering "127.0.0.1:548" for the server address in
> the Chooser) but upon submission of those items, it hangs (force-quittable).
> Sometimes MacSSH crashes with the hang, taking the TCP/IP stack with it and
> requiring a reboot, although giving it a larger memory allocation seems to
> have eliminated that problem. I don't see anything helpful in the SSH logs
> (local or server). I know Timbuktu will only forward if routed through
> guest-enabled SSH tunnel on other systems on my LAN (PC, Mac, Solaris,
> whatever), but I have not yet tried AFP with that approach.
>
> Any thoughts or advice would be much appreciated (besides telling my clients
> to switch to OS X or something else). The end-user systems involved are all
> OS 9, the ASIP box in question is OS 9 with ASIP 6.3.x, and the SSH server
> runs Red Hat Linux.
>
> Thanks in advance.
>
>
>
> tdv
>

Relevant Pages

  • Re: MacSSH connecting to BSD
    ... My recollection is that MacSSH ... > Do you have MacSSH confused with NiftyTelnet SSH, ... The bsd box is my first home built computer, the mac G4 is my first ...
    (comp.security.ssh)
  • Re: MacSSH connecting to BSD
    ... And the information on the MacSSH ... Do you have MacSSH confused with NiftyTelnet SSH, ... supported SSH1, or are you trying to say that your FreeBSD PC ...
    (comp.security.ssh)
  • Tunneling/port forwarding Timbuktu over SSH
    ... since we set up OpenSSH on a Linux server inside the network. ... With MacSSH, ... I can successfully tunnel HTTP, POP3, SMTP, telnet and LPR ... I cannot tunnel Timbuktu at all. ...
    (comp.security.ssh)