#ssh-tunnel

[sevennet-blog]

How to: Reverse SSH tunnel: how can I send my port number to the server? #computers #it #development

How to: Reverse SSH tunnel: how can I send my port number to the server? #computers #it #development

Reverse SSH tunnel: how can I send my port number to the server?

I have two machines, Client and Server.

Client (who is behind a corporate firewall) opens a reverse SSH tunnel to Server, which has a publicly-accessible IP address, using this command:

ssh -nNT -R0:localhost:2222 [email protected]

In OpenSSH 5.3+, the 0 occurring just after the -Rmeans “pick an available port” rather…

View On WordPress

[sevennet-blog]

How-to: Why does logging out of an SSH session hang when using port-forwarding? #dev #it #programming

How-to: Why does logging out of an SSH session hang when using port-forwarding? #dev #it #programming

Why does logging out of an SSH session hang when using port-forwarding?

I use dynamic SSH port-forwarding (-D) and normal SSH port-forwarding (-L or -R) for many different things, including adding a layer of encryption to my wireless web traffic. The command I use normally looks something like this:

ssh -l raam -D 9000 my-linux-server.com

After starting the tunnel, I configure my web browser to…

View On WordPress

[sevennet-blog]

How to: Block SSH tunneling to IP, allow only for certain users #development #it #dev

How to: Block SSH tunneling to IP, allow only for certain users #development #it #dev

Block SSH tunneling to IP, allow only for certain users

I need to setup SSH to block all access to a certain IP on port 555. Only a small group of users should be allowed to tunnel to that IP. Currently I have the following stuff in my sshd_config

Match User bob PermitOpen 1.2.3.4:555 5.6.7.8:555

The question I have is, how do I deny all other users access to this tunnel? I dont see a denyopen,…

View On WordPress

[sevennet-blog]

Resolved: Copy data through SSH tunnel over multiple hops #solution #fix #programming

Resolved: Copy data through SSH tunnel over multiple hops #solution #fix #programming

Copy data through SSH tunnel over multiple hops

We have two main environments in question:

Development and QA

Each environment has two servers:

Jump Box

Application server

In order to connect to the application server, you must connect to the jump box first, and then SSH to the Application server.

There are a few rules in place courtesy of the firewall:

You MUST connect to the application server…

View On WordPress

[sevennet-blog]

How to: Connecting to MySQL securely - MySQL's SSL vs Stunnel vs SSH Tunneling #solution #computers #it

How to: Connecting to MySQL securely – MySQL's SSL vs Stunnel vs SSH Tunneling #solution #computers #it

Connecting to MySQL securely – MySQL’s SSL vs Stunnel vs SSH Tunneling

We have a PHP application which connects to a MySQL server, and we wish to secure connections between the web & application servers and the database.

At peak times, the web servers make many hundreds of concurrent connections to the database, and perform lots of small reads and writes. I’m aware this isn’t optimal, and am…

View On WordPress

[sevennet-blog]

Solution: Can I configure VSFTPD to listen only to localhost? #development #answer #it

Solution: Can I configure VSFTPD to listen only to localhost? #development #answer #it

Can I configure VSFTPD to listen only to localhost?

I have a legacy app that needs FTP and cannot do SFTP.

My solution is:

put an FTP server in place using VSFTPD

configure the firewall to accept port 21 connections only from localhost

Set up an SSH connection from the client with the legacy app

Tunnel the FTP through SSH

I’m wondering though if I can configure VSFTPD to ignore connections from…

View On WordPress

[sevennet-blog]

Answer: How can ssh allowed to setup remote port forwarding but not execute commands? #solution #fix #development

Answer: How can ssh allowed to setup remote port forwarding but not execute commands? #solution #fix #development

How can ssh allowed to setup remote port forwarding but not execute commands?

How can an SSH command be setup to allow port forwarding but not execute commands.

I know that the ssh login can use -N to stop commands executing, but can the ssh config file be setup to disallow it?

Restricting the type of shell and the path in Linux is on option, but can it be done in the SSH configuration itself?

An…

View On WordPress

[stackcopybiz]

How-to: SSH access to office host behind NAT router #dev #programming #computers

How-to: SSH access to office host behind NAT router #dev #programming #computers

SSH access to office host behind NAT router

I would like to access the ssh port of my office linux host from home. Unfortunately the host is located behind a NAT router. So, the IP address is not publicly available. There is however access to another internet host (Server) which is unfortunately only non-root access. After a while of searching I do not find a suitable solution.

Following setup:

View On WordPress