Re: ssh over router?

From: Kyler Laird (Kyler_at_news.Lairds.org)
Date: 09/29/03


Date: Mon, 29 Sep 2003 18:11:37 GMT


"Marmos" <Marmos@gmx.ch> writes:

>I think you have to configurate the router by "port forwarding".

Yes, most of the WAPs I've seen allow this. Another option I use is to
set the machine to establish a tunnel with a machine that does have a
public IP address. Any host with SSH service (even the cheapo mail-
only accounts) should suffice. Then just run SSH to that public machine,
contacting your firewalled machine on the appropriate port. (I usually
do this for mobile devices.)

For example, if you run "ssh -R 2250:localhost 22 publichost" on your
firewalled host, you can get to it from the outside using something like
"ssh -p 2250 publichost". (You might want to check out Rocks or Reliable
SSH to keep the tunnel alive.)
        
--kyler



Relevant Pages

  • Re: Howto?
    ... the tunnel, one for an ssh shell back to the firewalled machine and the ... other back to the firewalled machine for vnc. ...
    (SSH)
  • Re: ssh over router?
    ... Any host with SSH service (even the cheapo mail- ... contacting your firewalled machine on the appropriate port. ... firewalled host, you can get to it from the outside using something like ... SSH to keep the tunnel alive.) ...
    (comp.security.ssh)
  • Re: What is The SSH?
    ... Building and Using SSH Tunnels ... What is an SSH tunnel? ... how to use it to make a connection to a server. ... You will need a working SSH client and server installation to build and test ...
    (microsoft.public.windows.server.networking)
  • RE: HOWTO Ping LAN???
    ... SSH to the box, and tunnel to other internal machines ... > network is by tunneling. ...
    (freebsd-questions)
  • SSH TCP forwarding: works with v1, not with v2 ssh
    ... that they're setting up the tunnels with no problem, ... I can get to the work ssh daemon: ... debug1: Connections to remote port 65002 forwarded to local address palimpsest:22 ... something answers (if I get "connection refused" there's no listener); ...
    (FreeBSD-Security)