[ale] port forwarding with SSH

John Wells jb at sourceillustrated.com
Fri Sep 27 09:20:34 EDT 2002


Damn....missed that.  Thanks!

John

Stephan Uphoff said:
>
> man ssh
>
> ....
>  	-g      Allows remote hosts to connect to local forwarded ports
> .....
>
>
> 	Stephan
>
>> As I've mentioned before, I have a need to forward all packets from a
>> machine on my company's network to an external machine on a kennesaw
>> server. I'm attempting to use a machine on my home network as the
>> proxy.
>>
>> The way I'm testing it is this:
>>
>> My home machine listens (allows packets through the firewall) on port
>> 80.  I can nmap -p 80 mymachine when apache is running and see the
>> port is open.
>>
>> I take apache down, run the command (as root) "ssh -L
>> 80:dest.at.kennesaw.edu:1755 mymachine".
>>
>> After doing this, I can telnet to port 80 when I'm logged into
>> mymachine and see that the port is being forwarded correctly.
>> However, when I try to do the same from work, I get "connection
>> refused".  nmap says the port is closed (although I have it open and
>> forwarded on my
>> firewall...remember, apache works on this port when I have it
>> running).
>>
>> Running tcpdump to see what's going on, my attempt at connecting from
>> the external (at work) machine looks like this:
>>
>> mycompanymachine -> myhomemachine [SYN]
>> myhomemachine -> mycompanymachine [RST, ACK]
>>
>> Anyone have an idea what might be causing this?  It would seem that
>> since the port's already configured to be open for apache, it should
>> still allow traffic through. Modifying /etc/hosts.allow seems to have
>> no effect.
>>
>> Thanks for the help!
>>
>> John
>>
>>
>>
>>
>>
>> ---
>> This message has been sent through the ALE general discussion list.
>> See http://www.ale.org/mailing-lists.shtml for more info. Problems
>> should be  sent to listmaster at ale dot org.
>>
>>




---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.






More information about the Ale mailing list