Re: How to use ssh tunnel to reach a machine on a private network?

2003-11-16 Thread Oliver Elphick
On Sun, 2003-11-16 at 01:30, Roberto Sanchez wrote:
 Oliver Elphick wrote:
...
  What I am trying to do is to use ssh tunnelling to go direct to one of
  the machines on the remote private network, because I need to be able to
  run X programs from that machine on my own display. 
...
 I do this all the time.
 
 [EMAIL PROTECTED] ssh -L 10001:localhost:10001 ted.domain.com
 [EMAIL PROTECTED] ssh -L 10001:localhost:5901 rufus.domain.com
 [EMAIL PROTECTED]

Thank you; that is what I needed.

 Adjust port numbers and options as necessary.

Are the port numbers just arbitrary selections?

-- 
Oliver Elphick[EMAIL PROTECTED]
Isle of Wight, UK http://www.lfix.co.uk/oliver
GPG: 1024D/3E1D0C1C: CA12 09E0 E8D5 8870 5839  932A 614D 4C34 3E1D 0C1C
 
 Therefore being justified by faith, we have peace 
  with God through our Lord Jesus Christ.Romans 5:1


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: How to use ssh tunnel to reach a machine on a private network?

2003-11-16 Thread Roberto Sanchez
Oliver Elphick wrote:
On Sun, 2003-11-16 at 01:30, Roberto Sanchez wrote:

Oliver Elphick wrote:
...

What I am trying to do is to use ssh tunnelling to go direct to one of
the machines on the remote private network, because I need to be able to
run X programs from that machine on my own display. 
...

I do this all the time.

[EMAIL PROTECTED] ssh -L 10001:localhost:10001 ted.domain.com
[EMAIL PROTECTED] ssh -L 10001:localhost:5901 rufus.domain.com
[EMAIL PROTECTED]


Thank you; that is what I needed.


Adjust port numbers and options as necessary.


Are the port numbers just arbitrary selections?

Except for the last port on the destination machine--which needs to be
the port your service is listening on (vnc or X), yes.
In my case, to get a vnc desktop, I setup the tunnel and then run
$ vncviewer localhost:10001
I choose 10001 because the machine I vnc into runs webmin (which is
port 1).
-Roberto


pgp0.pgp
Description: PGP signature


How to use ssh tunnel to reach a machine on a private network?

2003-11-15 Thread Oliver Elphick
I wonder if anyone can help me work out how to do this, please:

I have two private networks (192.168.1.0/24) each with a firewall
machine connecting through ADSL to the Internet.  Each private network
can reach the Internet through the firewall (using NAT); therefore no
machine except the firewall is visible from outside (at static IP
addresses allocated by the ISP).

I can, from any machine on either private network, do
ssh -X remote.firewall.address and connect to the remote firewall. 
What I am trying to do is to use ssh tunnelling to go direct to one of
the machines on the remote private network, because I need to be able to
run X programs from that machine on my own display.  However, I can't
work out how to do it.

So far, I tried

   ssh -X -L 8877:remote.private.machine:22 remote.firewall.address

(using 8877 as an arbitrary unassigned port) but all that gives me is a
connection to the remote firewall itself.

-- 
Oliver Elphick[EMAIL PROTECTED]
Isle of Wight, UK http://www.lfix.co.uk/oliver
GPG: 1024D/3E1D0C1C: CA12 09E0 E8D5 8870 5839  932A 614D 4C34 3E1D 0C1C
 
 It is better to trust in the LORD than to put  
  confidence in man.Psalms 118:8 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: How to use ssh tunnel to reach a machine on a private network?

2003-11-15 Thread Roberto Sanchez
Oliver Elphick wrote:
I wonder if anyone can help me work out how to do this, please:

I have two private networks (192.168.1.0/24) each with a firewall
machine connecting through ADSL to the Internet.  Each private network
can reach the Internet through the firewall (using NAT); therefore no
machine except the firewall is visible from outside (at static IP
addresses allocated by the ISP).
I can, from any machine on either private network, do
ssh -X remote.firewall.address and connect to the remote firewall. 
What I am trying to do is to use ssh tunnelling to go direct to one of
the machines on the remote private network, because I need to be able to
run X programs from that machine on my own display.  However, I can't
work out how to do it.

So far, I tried

   ssh -X -L 8877:remote.private.machine:22 remote.firewall.address

(using 8877 as an arbitrary unassigned port) but all that gives me is a
connection to the remote firewall itself.
I do this all the time.

[EMAIL PROTECTED] ssh -L 10001:localhost:10001 ted.domain.com
[EMAIL PROTECTED] ssh -L 10001:localhost:5901 rufus.domain.com
[EMAIL PROTECTED]
Adjust port numbers and options as necessary.

-Roberto


pgp0.pgp
Description: PGP signature