[ale] port forwarding with SSH

Stephan Uphoff ups at stups.com
Fri Sep 27 09:17:07 EDT 2002



man ssh

....
 	-g      Allows remote hosts to connect to local forwarded ports
.....


	Stephan

> As I've mentioned before, I have a need to forward all packets from a
> machine on my company's network to an external machine on a kennesaw
> server. I'm attempting to use a machine on my home network as the proxy.
> 
> The way I'm testing it is this:
> 
> My home machine listens (allows packets through the firewall) on port 80. 
> I can nmap -p 80 mymachine when apache is running and see the port is
> open.
> 
> I take apache down, run the command (as root) "ssh -L
> 80:dest.at.kennesaw.edu:1755 mymachine".
> 
> After doing this, I can telnet to port 80 when I'm logged into mymachine
> and see that the port is being forwarded correctly.  However, when I try
> to do the same from work, I get "connection refused".  nmap says the port
> is closed (although I have it open and forwarded on my
> firewall...remember, apache works on this port when I have it running).
> 
> Running tcpdump to see what's going on, my attempt at connecting from the
> external (at work) machine looks like this:
> 
> mycompanymachine -> myhomemachine [SYN]
> myhomemachine -> mycompanymachine [RST, ACK]
> 
> Anyone have an idea what might be causing this?  It would seem that since
> the port's already configured to be open for apache, it should still allow
> traffic through. Modifying /etc/hosts.allow seems to have no effect.
> 
> Thanks for the help!
> 
> John
> 
> 
> 
> 
> 
> ---
> This message has been sent through the ALE general discussion list.
> See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
> sent to listmaster at ale dot org.
> 
> 



---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.






More information about the Ale mailing list