Reverse SSH Tunneling, ...or how the cat can get the rodent behind the firewall Linux box behind your NAT (rodent) has 10.10.10.45 External Linux box on the net (cat) has 123.24.26.201 THE GOAL have the cat get the rodent: ------------------------------------------------------------------------- cat (123.24.26.201) -> |NAT| -> rodent (10.10.10.45) ------------------------------------------------------------------------- 1. SSH from the rodent to the cat (with public ip) using command below: (ok, so the analogy collapses horribly here... we have a suicidal mouse... or, we have a mouse taunting the cat, yeah, that's it...) ssh -R 19999:localhost:22 catuser@123.24.26.201 * port 19999 can be any unused port. 2. Now you can SSH from cat to rodent through SSH tuneling: ssh localhost -p 19999 Other servers can also access rodent (10.10.10.45) through the cat (123.24.26.201). BillyBob's server -> cat (123.24.26.201) -> |NAT| -> rodent (10.10.10.45) 1 From BillyBob's server: ssh catuser@123.24.26.201 2 After the login to cat: ssh localhost -p 19999 * the connection between rodent and cat must be alive at all time. the best way to do this is make the connection with ssh -R 19999:localhost:22 catuser@123.24.26.201 and then run "top" - this will keep the connection alive. |
Wagoneers FULL SIZE JEEPS JeepMeister "Jeep is America's -Enzo Ferrari MeisterTech Diesels + |
One Page Overview Intro to Linux |
|
at Midway Auto on SR9 in Snohomish, or at Northland Diesel in Bellingham, WA |