Re: [Leaf-user] ssh firewall revisited

2002-04-03 Thread Greg Morgan



Henning, Brian [EMAIL PROTECTED] wrote:
 
 Hello-
 I continue to have problems connecting to the webserver on my LAN.
 Here is my configurations using putty. Can anyone see what i am doing wrong?
 I thought i was following the directions.
 Thanks,
 
 brian
 
 putty at work:
 Source port:3005
 Destination: LEAF ip:80
 Local
 
 web browser at work:
 http://localhost:3005/
 
 setup at home:
 Leaf/echowall - port forward ssh
 |
 |
 |
 w2k/apache - port 80
 
 --__--__--

I think you are doing a great job and heading in the right direction. 
It appears that you have all the mechanics setup correctly.  You have
putty on your work computer. If you are using plink, then it appears
that you are using a command similar to
  plink -L 3005:myLEAFipAddress:80 myuser@myW2kboxIPorName

Now let's address the LEAF or W2K problems.
1.)  If you have configured LEAF to port forward port 22 to the W2K box,
then the W2K box needs to have a SSH server on it.  In this
configuration LEAF is not using SSH at all.  LEAF just redirects the
traffic to another server.  I know the putty site does not have a SSH
daemon, nor intends to create one.  If this is your configuration, you
need a SSH daemon on the W2K box to receive the port 22 forwards from
your LEAF firewall.  Perhaps someone else knows of a SSH daemon for
Windows.

2.)  If you are running SSH on your LEAF firewall, then the conection
stops at the firewall i.e. -L 3005:myLEAFipAddress:80 is trying to talk
to weblet.  In this case it appears like you are mixing port forwarding
and server processes.  I do not know if you there is a way to have the
SSH daemon send the decyrpted traffic to the W2K box from the firewall.  

If solutions cannot be found to either of these configurations, then
ipsec  sounds like an alternative.  I cannot address that solution at
this time.

Can anyone else add comments to Brians' configuration issues?

Greg Morgan

___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



RE: [Leaf-user] ssh firewall revisited

2002-04-03 Thread Henning, Brian

putty at work:
Source port:3005
Destination: ip of w2k machine on the local network:80
Local

web browser at work:
http://localhost:3005/

setup at home:
Leaf/echowall - port forward ssh
|
|
|
w2k/apache - port 80



Greg i got it fixed thanks for you time
i had to use the ip of w2k machine on the local network..





___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user