Re: ssh local port forwarding stopped working

2019-05-28 Thread Bruce Halco
ht VNC viewer. Since I can connect to the remote workstations from the VM, the problem cannot be with their service setup. And since the problem isn't resolved by using a different VNC viewer from my local workstation, the problem can't be the VNC client. This just leaves the ssh tunnel -

Re: ssh local port forwarding stopped working

2019-05-28 Thread Nicholas Geovanis
connect to the remote workstations from the VM, the problem > cannot be with their service setup. And since the problem isn't resolved > by using a different VNC viewer from my local workstation, the problem > can't be the VNC client. This just leaves the ssh tunnel - specifically > the port forwarding - as the only common element. > >

ssh local port forwarding stopped working

2019-05-28 Thread Gary Dale
't resolved by using a different VNC viewer from my local workstation, the problem can't be the VNC client. This just leaves the ssh tunnel - specifically the port forwarding - as the only common element.

Re: iptables, virtualbox and port forwarding

2014-06-11 Thread berenger . morel
Le 29.05.2014 06:56, Igor Cicimov a écrit : Maybe something like this? - Kernel config # sysctl -p net.ipv4.conf.default.rp_filter = 1 net.ipv4.ip_forward = 1 net.ipv4.tcp_syncookies = 1 net.ipv4.conf.all.log_martians = 1 net.ipv4.tcp_keepalive_time = 60 net.ipv4.tcp_keepalive_intvl = 20 net.i

Re: iptables, virtualbox and port forwarding

2014-06-11 Thread berenger . morel
at -A POSTROUTING -o eth0 -j MASQUERADE _ physical computers accessing VMs through some ports of my computer. For example, redirecting "172.20.14.XX:80" to "10.10.10.30:80". I will do that port forwarding for ssh ( port 22 ), http ( port 80 ) and postgresql ( port 5432 ) connections

Re: iptables, virtualbox and port forwarding

2014-05-30 Thread Chris Angelico
On Fri, May 30, 2014 at 8:51 PM, wrote: >> Hoping to find something that you can do entirely under your own >> control. :) > > > You mean, be your own boss? Heh, that's another way of interpreting that statement. But no, what I meant was "some way you can get the test/dev systems you need withou

Re: iptables, virtualbox and port forwarding

2014-05-30 Thread berenger . morel
Humpf... finger mistake. Also, there's fossil if you are in that situation: it's It's a DVCS which integrate a wiki and a bugtracker. Sounds really interesting, but I never took time to really play with it. So, in a situation where you are the only one to use real tools, and do not want to

Re: iptables, virtualbox and port forwarding

2014-05-30 Thread berenger . morel
Le 30.05.2014 12:08, Chris Angelico a écrit : On Fri, May 30, 2014 at 7:04 PM, wrote: What I basically want to do, and I do not understand how they ( my programmer colleagues ) can happily live without that, is a server for source versionning, bug tracking, wikis, etc. This stuff does not

Re: iptables, virtualbox and port forwarding

2014-05-30 Thread Chris Angelico
On Fri, May 30, 2014 at 7:04 PM, wrote: > What I basically want to do, and I do not understand how they ( my > programmer colleagues ) can happily live without that, is a server for > source versionning, bug tracking, wikis, etc. This stuff does not need any > virtual system or network, and is re

Re: iptables, virtualbox and port forwarding

2014-05-30 Thread berenger . morel
Le 28.05.2014 18:05, Joe a écrit : On Wed, 28 May 2014 21:25:23 +1000 Chris Angelico wrote: On Wed, May 28, 2014 at 9:03 PM, Joe wrote: > The point here is that all modern hardware is capable of IPv6, and > even if you aren't using it, malware writers may be. And by > default, a Debian mach

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Igor Cicimov
perfectly, but > now I would like to allow 2 things: > _ VMs to access the physical LAN, so that they could access the apt proxy > I have installed there for installing softwares and updates > _ physical computers accessing VMs through some ports of my computer. For > example, redirec

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Pascal Hambourg
o eth0 -j MASQUERADE > _ physical computers accessing VMs through some ports of my computer. > For example, redirecting "172.20.14.XX:80" to "10.10.10.30:80". I will > do that port forwarding for ssh ( port 22 ), http ( port 80 ) and > postgresql ( port 5432 ) connectio

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Joe
On Wed, 28 May 2014 21:25:23 +1000 Chris Angelico wrote: > On Wed, May 28, 2014 at 9:03 PM, Joe wrote: > > The point here is that all modern hardware is capable of IPv6, and > > even if you aren't using it, malware writers may be. And by > > default, a Debian machine is wide open to IPv6, and so

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Tony van der Hoff
On 28/05/14 14:29, Andrei POPESCU wrote: > On Mi, 28 mai 14, 21:39:24, Chris Angelico wrote: >> >> It's off-topic for this list, > > CC: and Reply-To: -offtopic, this time for real :( > Please disregard the other post > Followup to list just puts it straight back there. >> but I would be very cu

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Andrei POPESCU
On Mi, 28 mai 14, 21:39:24, Chris Angelico wrote: > > It's off-topic for this list, CC: and Reply-To: -offtopic, this time for real :( Please disregard the other post > but I would be very curious to know how > much extra, on average, people would pay in order to get an IPv6 > netblock. Maybe it

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Andrei POPESCU
On Mi, 28 mai 14, 21:39:24, Chris Angelico wrote: > > It's off-topic for this list, CC: and Reply-To: -offtopic > but I would be very curious to know how > much extra, on average, people would pay in order to get an IPv6 > netblock. Maybe it really isn't commercially important. ISP: You can get

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Chris Angelico
On Wed, May 28, 2014 at 9:31 PM, Brad Rogers wrote: > On Wed, 28 May 2014 21:25:23 +1000 > Chris Angelico wrote: > > Hello Chris, > >>still trying to convince his ISPs that IPv6 is worth supporting > > Hard, isn't it? > > Several (many?) ISPs in these parts seem to be doing the equivalent of > st

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Brad Rogers
On Wed, 28 May 2014 21:25:23 +1000 Chris Angelico wrote: Hello Chris, >still trying to convince his ISPs that IPv6 is worth supporting Hard, isn't it? Several (many?) ISPs in these parts seem to be doing the equivalent of sticking their fingers in their ears and humming loudly, when if custome

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Chris Angelico
On Wed, May 28, 2014 at 9:03 PM, Joe wrote: > The point here is that all modern hardware is capable of IPv6, and > even if you aren't using it, malware writers may be. And by default, a > Debian machine is wide open to IPv6, and some of its software is > listening to it. Run a netstat to see which

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Joe
On Wed, 28 May 2014 11:36:03 +0200 berenger.mo...@neutralite.org wrote: > > I do not think I need ipv6 for now. I'll start with the probably > easier ipv4, and maybe someday I'll experiment with the v6, if I have > the opportunity to work in a v6 LAN. > > The point here is that all modern har

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread berenger . morel
me to have port forwarding working from 172.20.14.XX:80 to 10.10.10.30:80. Problem is, rules vanished since then, and my memory about the exact configuration or search keywords too. And to add to the fun, I remember having discovered after several hours last week that the port forwarding rules I

Re: iptables, virtualbox and port forwarding

2014-05-27 Thread Chris Angelico
On Wed, May 28, 2014 at 8:13 AM, Joe wrote: > This package is relatively recent, and when I needed to address this > problem, I had just built a Linux-From-Scratch system, so I took their > init script skeleton and made a pseudo-daemon, entering a set of > iptables commands at boot. This is an alt

Re: iptables, virtualbox and port forwarding

2014-05-27 Thread Joe
On Tue, 27 May 2014 18:24:41 +0200 berenger.mo...@neutralite.org wrote: > Hello list. > > I am trying to build a virtual network exposing servers accessible > from the LAN. > I have done a lot of searches on the web and it worked last week, but > since then, I have restarted my computer and had

iptables, virtualbox and port forwarding

2014-05-27 Thread berenger . morel
10.10.30:80". I will do that port forwarding for ssh ( port 22 ), http ( port 80 ) and postgresql ( port 5432 ) connections in a first time. Thanks -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas..

RE: More on port forwarding(ssh, netcat and amule!)

2012-10-11 Thread Pietro Paolini
gs RST set on. Hope this can help you. Pietro. -Original Message- From: robo...@news.nic.it [mailto:robo...@news.nic.it] On Behalf Of houkensjtu Sent: giovedì 11 ottobre 2012 10:53 To: debian-user@lists.debian.org Subject: More on port forwarding(ssh, netcat and amule!) Hi debianer!

Re: More on port forwarding(ssh, netcat and amule!)

2012-10-11 Thread Tom Grace
On 11/10/12 09:53, houkensjtu wrote: > It seems that, not only on the router, but also I should open a specific port > on my laptop, otherwise netcat will not be able to connect from outside my > home. > > I wonder why this happens and what is the mechanism behind it. > Is it possible to open a

More on port forwarding(ssh, netcat and amule!)

2012-10-11 Thread houkensjtu
Hi debianer! I post a question about port forwarding yesterday and got quick reply, big thanks! Now I still have sth. not clear and it can be described as: I have a laptop in my home, which is connected to my router. Yesterday, I succeeded in open a ssh port(22) on router, and start ssh server

Re: newbie question on port forwarding(and ssh, netcat)

2012-10-10 Thread Valery Mamonov
日木曜日 1時00分03秒 UTC+9 houkensjtu: > > Hi debianer! > > > > I am a newbie both of debian and networking... > > > > Recently I am trying to connect my home laptop(I have a router in my > home) from office. I read several articles on port forwarding. And I > succeede

Re: newbie question on port forwarding(and ssh, netcat)

2012-10-10 Thread houkensjtu
and networking... > > Recently I am trying to connect my home laptop(I have a router in my home) > from office. I read several articles on port forwarding. And I succeeded in > opening an 22 port on my router, also I started ssh server on my home laptop. > > > > (suppo

Re: newbie question on port forwarding(and ssh, netcat)

2012-10-10 Thread Neal Murphy
On Wednesday, October 10, 2012 08:19:25 PM houkensjtu wrote: > Thanks for great reply!! > I have to apologize for sth... I forgot to say that all these experiments > were done in home on my laptop...omg So, now I solved the problem with > echo "1">/proc/sys/net/ipv4/ip_forward > > What is this fil

Re: newbie question on port forwarding(and ssh, netcat)

2012-10-10 Thread houkensjtu
veral experiment and I got confusing in some of its result. > > > > > > 1. ssh USER@DEBIAN > > > > > > works well!! > > > > We assume this means you were able to log in with your password, so it > > very much looks like you have set up

Re: newbie question on port forwarding(and ssh, netcat)

2012-10-10 Thread houkensjtu
t; > > Recently I am trying to connect my home laptop(I have a router in my > > > home) from office. I read several articles on port forwarding. And I > > > succeeded in opening an 22 port on my router, also I started ssh > > > server on my home lapt

Re: newbie question on port forwarding(and ssh, netcat)

2012-10-10 Thread Brian
On Wed 10 Oct 2012 at 19:44:27 +0100, Joe wrote: [Some good advice snipped] > However you resolve the initial problem, the ssh server is very heavily > targeted by the bad guys, using password checking bots. A quick and > dirty security measure is to forward a non-standard high numbered > externa

Re: newbie question on port forwarding(and ssh, netcat)

2012-10-10 Thread Brian
On Wed 10 Oct 2012 at 08:35:13 -0700, houkensjtu wrote: > I am a newbie both of debian and networking... Recently I am trying > to connect my home laptop(I have a router in my home) from office. I > read several articles on port forwarding. And I succeeded in opening > an 22 port

Re: newbie question on port forwarding(and ssh, netcat)

2012-10-10 Thread Joe
On Wed, 10 Oct 2012 08:35:13 -0700 (PDT) houkensjtu wrote: > Hi debianer! > I am a newbie both of debian and networking... > Recently I am trying to connect my home laptop(I have a router in my > home) from office. I read several articles on port forwarding. And I > succeeded i

Re: newbie question on port forwarding(and ssh, netcat)

2012-10-10 Thread Nuno Magalhães
http://www.catb.org/esr/faqs/smart-questions.html A bit of searching the net on port-forwarding oughta give you the answer. You probably forgot to forward port 22 on the router to whichever ip adress your DEBIAN has. Search around for stuff on your router/ISP combo as they're almost a

newbie question on port forwarding(and ssh, netcat)

2012-10-10 Thread houkensjtu
Hi debianer! I am a newbie both of debian and networking... Recently I am trying to connect my home laptop(I have a router in my home) from office. I read several articles on port forwarding. And I succeeded in opening an 22 port on my router, also I started ssh server on my home laptop

vpn ipsec + port forwarding

2012-03-28 Thread lestoilfante
| |___|            |            | __ | *10.0.0.2* | | --- PC --- | |_| On SERVER side I have a port forwarding on tcp 80 to 10.0.0.2, so from eth1 I can reach PC on 192.168.100.2:80 and this is working fine. As a new upgrade to my server I added a vpn connection from SERVER to NET 192.168.1.0 behind VPN

Re: Addressing a machine behind the router without port forwarding or DMZ

2011-04-03 Thread Pascal Hambourg
Hello, Dotan Cohen a écrit : > > Assuming a LAN with a router and three machines: > 10.0.0.1 Router > 10.0.0.2 Computer1 > 10.0.0.3 Computer2 > 10.0.0.4 Computer3 > > The router sits on an outside IP address of 123.45.67.89. There is no > DMZ or port forwarding assig

Re: Addressing a machine behind the router without port forwarding or DMZ

2011-04-03 Thread David Goodenough
outer sits on an outside IP address of 123.45.67.89. There is no > DMZ or port forwarding assigned on the router to any of the other > machines. > > Is there any way an individual from outside the LAN could access a > resource (Apache for instance, or SSH) on Computer1 assuming that he

Re: Addressing a machine behind the router without port forwarding or DMZ

2011-04-03 Thread shawn wilson
t; > The router sits on an outside IP address of 123.45.67.89. There is no > DMZ or port forwarding assigned on the router to any of the other > machines. > > Is there any way an individual from outside the LAN could access a > resource (Apache for instance, or SSH) on Computer1 ass

Re: Addressing a machine behind the router without port forwarding or DMZ

2011-04-03 Thread Axel Freyn
uter3 > > The router sits on an outside IP address of 123.45.67.89. There is no > DMZ or port forwarding assigned on the router to any of the other > machines. > > Is there any way an individual from outside the LAN could access a > resource (Apache for instance, or SSH) on Co

Re: Addressing a machine behind the router without port forwarding or DMZ

2011-04-03 Thread Dotan Cohen
On Sun, Apr 3, 2011 at 15:35, Steven wrote: > To my knowledge, no, there is not. Only if the traffic is part of an > existing connection created by one of the machines inside your LAN. > Thanks, that is what I suspected. > If he wants access to computer 1, your router would need to be > compromi

Re: Addressing a machine behind the router without port forwarding or DMZ

2011-04-03 Thread Steven
> The router sits on an outside IP address of 123.45.67.89. There is no > DMZ or port forwarding assigned on the router to any of the other > machines. > > Is there any way an individual from outside the LAN could access a > resource (Apache for instance, or SSH) on Computer1 a

Re: Addressing a machine behind the router without port forwarding or DMZ

2011-04-03 Thread Nuno Magalhães
On Sun, Apr 3, 2011 at 13:25, Dotan Cohen wrote: > Not a Debian-specific question, but I turn to the best brains that I know. Then OT it. > Is there any way an individual from outside the LAN could access a > resource (Apache for instance, or SSH) on Computer1 assuming that he > knows Computer1's

Addressing a machine behind the router without port forwarding or DMZ

2011-04-03 Thread Dotan Cohen
Not a Debian-specific question, but I turn to the best brains that I know. Assuming a LAN with a router and three machines: 10.0.0.1 Router 10.0.0.2 Computer1 10.0.0.3 Computer2 10.0.0.4 Computer3 The router sits on an outside IP address of 123.45.67.89. There is no DMZ or port forwarding

Re: port forwarding without using ssh

2010-09-13 Thread green
Zhang Weiwu wrote at 2010-09-13 02:23 -0500: > Thank you! Now that I tried it, te apf-client package proved very useful > in my case. I followed your advice almost a year later because I was too > busy with daily business and kept your email as "marked for personal > todo" for a year or so. Excell

Re: port forwarding without using ssh

2010-09-13 Thread Zhang Weiwu
Hi. On 2009年11月12日 07:53, green wrote: > Zhang Weiwu wrote at 2009-11-10 20:36 -0600: > >> Hello. I have a remote server inside a remote office covered by NAT >> masquerade where port forwarding not possible, and a local server in my >> local office not covered by NAT

Re: port forwarding without using ssh

2009-11-11 Thread green
Zhang Weiwu wrote at 2009-11-10 20:36 -0600: > Hello. I have a remote server inside a remote office covered by NAT > masquerade where port forwarding not possible, and a local server in my > local office not covered by NAT masquerade. In order to access the > remote office and hosts in

Re: port forwarding without using ssh

2009-11-11 Thread Todd A. Jacobs
On Wed, Nov 11, 2009 at 10:36:20AM +0800, Zhang Weiwu wrote: > The problem of this solution is security. I do not want to grant shell > access of local_server to remote_server. What would you recommend me > to do in this case? I could try to limit access of the account used by > remote server ssh

Re: port forwarding without using ssh

2009-11-11 Thread Mr. Wang Long
On Wed, Nov 11, 2009 at 10:36, Zhang Weiwu wrote: > Hello. I have a remote server inside a remote office covered by NAT > masquerade where port forwarding not possible, and a local server in my > local office not covered by NAT masquerade. In order to access the > remote office and h

Re: port forwarding without using ssh

2009-11-10 Thread Zhang Weiwu
Alex Samad wrote: > On Wed, Nov 11, 2009 at 10:36:20AM +0800, Zhang Weiwu wrote: > >> The problem of this solution is security. I do not want to grant shell >> access of local_server to remote_server. What would you recommend me to >> do in this case? I could try to limit access of the account u

Re: port forwarding without using ssh

2009-11-10 Thread Alex Samad
On Wed, Nov 11, 2009 at 10:36:20AM +0800, Zhang Weiwu wrote: > Hello. I have a remote server inside a remote office covered by NAT > masquerade where port forwarding not possible, and a local server in my > local office not covered by NAT masquerade. In order to access the > remot

port forwarding without using ssh

2009-11-10 Thread Zhang Weiwu
Hello. I have a remote server inside a remote office covered by NAT masquerade where port forwarding not possible, and a local server in my local office not covered by NAT masquerade. In order to access the remote office and hosts in that office, I do this: On remote office server, in a screen

Re: run ssh as service for port forwarding

2009-06-14 Thread Tzafrir Cohen
On Mon, Jun 15, 2009 at 12:16:22AM +0800, Zhang Weiwu wrote: > Hello. We have a great firewall that scans keywords on tcp connections' > raw data, thus I could not use my http proxy server outside of the > firewall because both direct connection to the web server and in-direct > connect to the http

run ssh as service for port forwarding

2009-06-14 Thread Zhang Weiwu
Hello. We have a great firewall that scans keywords on tcp connections' raw data, thus I could not use my http proxy server outside of the firewall because both direct connection to the web server and in-direct connect to the http proxy are scanned by the firewall. My trick is to run 'ssh -L' and

Re: IPTables Port Forwarding

2007-03-07 Thread Giacomo Montagner
On Wed, 2007-03-07 at 16:24 +0100, Joe Hart wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Giacomo Montagner wrote: > > On 3/3/07, John L Fjellstad <[EMAIL PROTECTED]> wrote: > >> Johnno <[EMAIL PROTECTED]> writes: > >> > >> > Hello > >> > > >> > Need a little bit of help here... et

Re: IPTables Port Forwarding

2007-03-07 Thread Joe Hart
> > iptables -A POSTROUTING -t nat -i eth0 -s 192.168.1.50 -p tcp --sport > 80 -j SNAT --to-source > > so the client get the answer from your-public-ip > > Please let me know if this helps, it's been a while for me too, since my > last > handmade firewall. &

Re: IPTables Port Forwarding

2007-03-07 Thread Giacomo Montagner
On 3/3/07, John L Fjellstad <[EMAIL PROTECTED]> wrote: Johnno <[EMAIL PROTECTED]> writes: > Hello > > Need a little bit of help here... eth1 = Internet, eth0 = LAN, will > this work? > > iptables -A PREROUTING -t nat -i eth1 -p tcp --dport 80 -j DNAT --to > 192.168.1.50:80 > iptables -A INPUT -

Re: IPTables Port Forwarding

2007-03-02 Thread John L Fjellstad
Johnno <[EMAIL PROTECTED]> writes: > Hello > > Need a little bit of help here... eth1 = Internet, eth0 = LAN, will > this work? > > iptables -A PREROUTING -t nat -i eth1 -p tcp --dport 80 -j DNAT --to > 192.168.1.50:80 > iptables -A INPUT -p tcp -m state --state NEW --dport 80 -i eth1 -j ACCEPT >

IPTables Port Forwarding

2007-03-01 Thread Johnno
Hello Need a little bit of help here... eth1 = Internet, eth0 = LAN, will this work? iptables -A PREROUTING -t nat -i eth1 -p tcp --dport 80 -j DNAT --to 192.168.1.50:80 iptables -A INPUT -p tcp -m state --state NEW --dport 80 -i eth1 -j ACCEPT Anything on port 80 to goto a internal server on

Re: port forwarding problem. Probably easy if you know how.

2006-04-25 Thread Gilberto Villani Brito
was cracked last December and I reinstalled everything > from scratch using a sarge netinstall CD. (I checked all scripts I > resurrect from the old system, and recompiled all my *own* binaries > from original source code. The script I mention below hasn't been > molested.) &

Re: port forwarding problem. Probably easy if you know how.

2006-04-25 Thread Gilberto Villani Brito
was cracked last December and I reinstalled everything > from scratch using a sarge netinstall CD. (I checked all scripts I > resurrect from the old system, and recompiled all my *own* binaries > from original source code. The script I mention below hasn't been > molested.) &

Re: port forwarding problem. Probably easy if you know how.

2006-04-24 Thread Jon Dowland
At 1145804173 past the epoch, [EMAIL PROTECTED] wrote: > On Sun, Apr 23, 2006 at 09:11:14AM -0500, Forrest Smith > wrote: > > The folks on the Shorewall project have done all this > > for you: > > Does shorewall find and install the missing kernel > modules. wherever they are? Or does it just use

Re: port forwarding problem. Probably easy if you know how.

2006-04-24 Thread George Borisov
[EMAIL PROTECTED] wrote: > > But it doesn't work. > > Lines like > > iptables -t nat -A PREROUTING --protocol tcp -d 216.138.195.194 --dport 27012 > -j DNAT --to-destination 172.25.1.5:27012 --verbose > iptables -t nat -A PREROUTING --protocol udp -d 216.138.195.194 --dport 27012 > -j DNAT --t

Re: port forwarding problem. Probably easy if you know how.

2006-04-24 Thread hendrik
On Sun, Apr 23, 2006 at 08:36:15PM -0700, charles norwood wrote: > On Sun, 2006-04-23 at 14:56 -0400, [EMAIL PROTECTED] wrote: > > On Sun, Apr 23, 2006 at 09:11:14AM -0500, Forrest Smith wrote: > > > The folks on the Shorewall project have done all this for you: > > > > > > apt-get install shore

Re: port forwarding problem. Probably easy if you know how.

2006-04-23 Thread charles norwood
On Sun, 2006-04-23 at 14:56 -0400, [EMAIL PROTECTED] wrote: > On Sun, Apr 23, 2006 at 09:11:14AM -0500, Forrest Smith wrote: > > The folks on the Shorewall project have done all this for you: > > > > apt-get install shorewall > > > > F.S > > Does shorewall find and install the missing kernel m

Re: port forwarding problem. Probably easy if you know how.

2006-04-23 Thread Florian Kulzer
On Sun, Apr 23, 2006 at 14:56:13 -0400, [EMAIL PROTECTED] wrote: [...] > Does shorewall find and install the missing kernel modules. wherever > they are? Or does it just use iptables, whose docs say it tries to > load them (but it is evidently not succeeding). > > I *have* the set of iptables

Re: port forwarding problem. Probably easy if you know how.

2006-04-23 Thread hendrik
On Sun, Apr 23, 2006 at 09:11:14AM -0500, Forrest Smith wrote: > The folks on the Shorewall project have done all this for you: > > apt-get install shorewall > > F.S Does shorewall find and install the missing kernel modules. wherever they are? Or does it just use iptables, whose docs say it

Re: port forwarding problem. Probably easy if you know how.

2006-04-23 Thread Forrest Smith
st December and I reinstalled everything > from scratch using a sarge netinstall CD. (I checked all scripts I > resurrect from the old system, and recompiled all my *own* binaries > from original source code. The script I mention below hasn't been > molested.) > > I run

port forwarding problem. Probably easy if you know how.

2006-04-23 Thread hendrik
from original source code. The script I mention below hasn't been molested.) I run the same script for port-forwarding and masquerading that I used before the reinstall. But it doesn't work. Lines like iptables -t nat -A PREROUTING --protocol tcp -d 216.138.195.194 --dport 27012 -j DNAT -

Re: How to enable X port forwarding with ssh

2006-01-23 Thread Greg Norris
On Mon, Jan 23, 2006 at 05:25:39AM -0800, Leonid Grinberg wrote: > Yeah, you need to enable it in /etc/ssh/sshd_config > Then, use ssh -X host.domain -l username > (note: it has to be enabled on both sides, and you actually have to > have X on both sides.) More specifically, you need to ensure tha

Re: How to enable X port forwarding with ssh

2006-01-23 Thread Leonid Grinberg
I try to start xclock I get error: > > > > Error: Can't open display: > > > > So how do I enable X port forwarding? > > Have you added > X11Forwarding yes > to /etc/ssh/sshd_config, then restart the ssh service? That works for > me... > >

Re: How to enable X port forwarding with ssh

2006-01-23 Thread Edward Shornock
rt xclock I get error: > > Error: Can't open display: > > So how do I enable X port forwarding? Have you added X11Forwarding yes to /etc/ssh/sshd_config, then restart the ssh service? That works for me... signature.asc Description: Digital signature

How to enable X port forwarding with ssh

2006-01-23 Thread Juraj Fedel
* ForwardX11 yes In both cases I can see this message when passing -v option debug1: Requesting X11 forwarding with authentication spoofing. and when I try to start xclock I get error: Error: Can't open display: So how do I enable X port forwarding? Juraj -- To UNSUBSCRIBE, email to [

Re: Exim4 + port forwarding

2005-09-08 Thread Roel Schroeven
Kumar Appaiah wrote: On Thu, Sep 08, 2005 at 12:52:14PM +0200, Roel Schroeven wrote: Kumar Appaiah wrote: On Wed, Sep 07, 2005 at 06:33:28AM -0700, James Vahn wrote: Kumar Appaiah wrote: Dear list, I have been using fetchmail + procmail + exim4 to handle my mail. I have a setup by whi

Re: Exim4 + port forwarding

2005-09-08 Thread James Vahn
Kumar Appaiah wrote: > On Wed, Sep 07, 2005 at 06:54:38PM -0700, James Vahn wrote: >> Meaning that this command does not produce a response? >> telnet smarthost 25 > > Exactly. So what happens if you run exim on another port, and then do your port forwarding on th

Re: Exim4 + port forwarding

2005-09-08 Thread Kumar Appaiah
On Thu, Sep 08, 2005 at 12:52:14PM +0200, Roel Schroeven wrote: > Kumar Appaiah wrote: > > >On Wed, Sep 07, 2005 at 06:33:28AM -0700, James Vahn wrote: > > > >>Kumar Appaiah wrote: > >> > >>>Dear list, > >>>I have been using fetchmail + procmail + exim4 to handle my mail. I > >>>have a setup by wh

Re: Exim4 + port forwarding

2005-09-08 Thread Roel Schroeven
Kumar Appaiah wrote: On Wed, Sep 07, 2005 at 06:33:28AM -0700, James Vahn wrote: Kumar Appaiah wrote: Dear list, I have been using fetchmail + procmail + exim4 to handle my mail. I have a setup by which certain messages are received by procmail, and a copy of some is forwarded to another add

Re: Exim4 + port forwarding

2005-09-08 Thread Roel Schroeven
Kumar Appaiah wrote: On Wed, Sep 07, 2005 at 06:33:28AM -0700, James Vahn wrote: Kumar Appaiah wrote: Dear list, I have been using fetchmail + procmail + exim4 to handle my mail. I have a setup by which certain messages are received by procmail, and a copy of some is forwarded to another add

Re: Exim4 + port forwarding

2005-09-07 Thread Steve Lamb
Kumar Appaiah wrote: > Thanks for patiently anwering my query, hope it's clear now. Now, can > you think of a solution? How attached are you to Exim? Personally when it comes to smarthost relaying I found nullmailer to be a much better alternative. Smaller, specially designed to forward to a

Re: Exim4 + port forwarding

2005-09-07 Thread Steve Lamb
Kumar Appaiah wrote: > On Wed, Sep 07, 2005 at 07:08:01PM -0700, Steve Lamb wrote: >>Do you control that other machine? What is preventing you from opening up >>another port for Exim (presuming it is running Exim) to listen to? > 1.I do not control the other machine. > 2.How would making exim

Re: Exim4 + port forwarding

2005-09-07 Thread Steve Lamb
James Vahn wrote: > Meaning that this command does not produce a response? James, you're way off base. Look, his ISP has blocked him from outbound port 25 connections. He did not every connect to his ISP's SMTP server. He does not want to connect to his ISP's SMTP server. He wants to conne

Re: Exim4 + port forwarding

2005-09-07 Thread Kumar Appaiah
On Wed, Sep 07, 2005 at 06:54:38PM -0700, James Vahn wrote: > Kumar Appaiah wrote: > > The problem is that all my requests to the smarthost's port 25 are > > blocked. > > Meaning that this command does not produce a response? > > telnet smarthost 25 Exactly. But I have ssh access to ano

Re: Exim4 + port forwarding

2005-09-07 Thread Kumar Appaiah
On Wed, Sep 07, 2005 at 07:08:01PM -0700, Steve Lamb wrote: > Kumar Appaiah wrote: > > Because there is no SMTP server running there! The server runs SMTP on > > port 25, which is blocked, and I have a connection to that port 25 > > through my machine's 10025 port. > > Do you control that othe

Re: Exim4 + port forwarding

2005-09-07 Thread James Vahn
Kumar Appaiah wrote: > The problem is that all my requests to the smarthost's port 25 are > blocked. Meaning that this command does not produce a response? telnet smarthost 25 "smarthost" being something like "mail.isp.com" or (better) their IP address. Will they give you an MX address?

Re: Exim4 + port forwarding

2005-09-07 Thread Steve Lamb
Kumar Appaiah wrote: > Because there is no SMTP server running there! The server runs SMTP on > port 25, which is blocked, and I have a connection to that port 25 > through my machine's 10025 port. Do you control that other machine? What is preventing you from opening up another port for Exim

Re: Exim4 + port forwarding

2005-09-07 Thread Kumar Appaiah
On Wed, Sep 07, 2005 at 09:28:49PM +0200, Laurent CARON wrote: > Kumar Appaiah a écrit : > >The problem is that all my requests to the smarthost's port 25 are > >blocked. So, I try to ssh to another computer, forward the port 25 of > >that SMTP server to port 10025 on my computer, and tell exim to

Re: Exim4 + port forwarding

2005-09-07 Thread Laurent CARON
Kumar Appaiah a écrit : On Wed, Sep 07, 2005 at 06:33:28AM -0700, James Vahn wrote: Kumar Appaiah wrote: Dear list, I have been using fetchmail + procmail + exim4 to handle my mail. I have a setup by which certain messages are received by procmail, and a copy of some is forwarded to an

Re: Exim4 + port forwarding

2005-09-07 Thread Kumar Appaiah
On Wed, Sep 07, 2005 at 06:33:28AM -0700, James Vahn wrote: > Kumar Appaiah wrote: > > Dear list, > > I have been using fetchmail + procmail + exim4 to handle my mail. I > > have a setup by which certain messages are received by procmail, and a > > copy of some is forwarded to another address autom

Re: Exim4 + port forwarding

2005-09-07 Thread James Vahn
Kumar Appaiah wrote: > Dear list, > I have been using fetchmail + procmail + exim4 to handle my mail. I > have a setup by which certain messages are received by procmail, and a > copy of some is forwarded to another address automatically. > > Now, recently, due to excessive spread of viruses on th

Exim4 + port forwarding

2005-09-06 Thread Kumar Appaiah
highly vulnerable mail client on a popular but vulnerable OS (need I say more ;-), port 25 requests have ben blocked for good! That means, exim can't forward my messages anymore. Now, I have access through SSH to a machine close to my SMTP server, so I have managed to get sending work using

Re: Persistent port forwarding without ssh

2004-12-10 Thread Robert S
> You could use masquarading (iptables) on the debian machine to forward > some port > on the debian machine to the server and then when you connect ssh to that > port > the connection will be forwarded directly to the server. That's the way I was hoping to do it. As I have absolutely no experi

Re: Persistent port forwarding without ssh

2004-12-09 Thread Harland Christofferson
At Thursday, 09 December 2004, Micha Feigin <[EMAIL PROTECTED]> wrote: >At Thu, 9 Dec 2004 21:49:47 +1100, >Robert S wrote: >> >> I am wanting to set up a VPN using ssh between my office and my home Windows >> PCs, using a debian box at the remote end. The setup is as follows: >> >> HOME (wi

Re: Persistent port forwarding without ssh

2004-12-09 Thread Micha Feigin
At Thu, 9 Dec 2004 21:49:47 +1100, Robert S wrote: > > I am wanting to set up a VPN using ssh between my office and my home Windows > PCs, using a debian box at the remote end. The setup is as follows: > > HOME (winxp)- - - -- - - - DEBIAN SERVER > (win2K) > > I have managed to connec

Re: Persistent port forwarding without ssh

2004-12-09 Thread Gregory Seidman
On Thu, Dec 09, 2004 at 09:49:47PM +1100, Robert S wrote: } I am wanting to set up a VPN using ssh between my office and my home Windows } PCs, using a debian box at the remote end. The setup is as follows: } } HOME (winxp)- - - -- - - - DEBIAN SERVER } (win2K) } } I have managed to co

Persistent port forwarding without ssh

2004-12-09 Thread Robert S
I am wanting to set up a VPN using ssh between my office and my home Windows PCs, using a debian box at the remote end. The setup is as follows: HOME (winxp)- - - -- - - - DEBIAN SERVER (win2K) I have managed to connect (using vnc) to SERVER using PuTTY or ssh at the home end thus: 1

Re: ssh port forwarding errors

2004-12-06 Thread Allene . Lester
Allene Lester Sun Certified System Administrator (Solaris 8 OE) Operating Systems Programmer (TSDC UNIX) Federal Reserve Information Technology 214-922-6436 [EMAIL PROTECTED]

Re: need iptables port forwarding help! (solved)

2004-09-06 Thread Tom Vier
ok, i solved it. 8) here's the script i'm using. thanks for everyone's help. -- Tom Vier <[EMAIL PROTECTED]> DSA Key ID 0x15741ECE script: #!/bin/bash INTFWIP="10.86.79.10" INTIF="eth0" EXTIF="eth1" EXTIP=" fconfig $EXTIF | awk /$EXTIF/'{next}//{split($0,a,":");\ split(a[2],a," ");print a[1

Re: need iptables port forwarding help!

2004-09-06 Thread Mike Fedyk
Tom Vier wrote: On Mon, Sep 06, 2004 at 01:43:36PM -0700, Mike Fedyk wrote: Did you copy the apropriate files to /etc/shorewall? What changes did you make? did "shorewall restart" give any errors? no errors. here's a tarball of my config. i didn't add the stuff for dnat. thanks for the help

  1   2   >