Home / server / Questions / 187334
Accepted
Darkmage
Asked: 2010-10-05 06:29:09 +0800 CST

Sending traffic across two lan, trough port 80 and revese SSH tunneling. How to setup server

  • 772

Im want to send traffic over to Host B on port 3000, i have access to all nodes in this drawing, the only port that is open between these two lans is port 80 from Linux Box B to Linux box A.

so i do a "ssh -R 1206:192.168.1.10:22 [email protected] -p 80", and ssh back trough the tunnel with "ssh -L 3000:10.10.10.10:3000 disp@localhost -1206"

if im correct this now listens to port 3000 on the Linux Box A and sends it to Linux Box B trough the tunnel to port 3000? are my logic correct?

how can i now route this traffic over to port 3000 on host B.

and if i want t two way connection "From B to A" how can this be done?

ssh tunneling

linux ssh port-forwarding ssh-tunnel

1 Answers

  1. Best Answer

    IMO your routing is/IP ranges are kind of weird but I guess that's not part of the problem.

    I'm working a bit on guesses but I hope it's still of some help.

    linux_box_b$ ssh -g -R *:3000:192.168.1.11:3000 [email protected] -p 80

    now if you send something from host_a to linux_box_a:3000 it actually gets sent to host_b:3000. For this to work the sshd on Linux Box A has to allow GatewayPorts and AllowTcpForwarding

    for the other direction use

    linux_box_b$ ssh -g -L *:3000:192.168.1.11:3000 [email protected] -p 80

    now Linux Box B listens on port 3000 an tunnels them to Host A port 3000.

    With this solution though always the last part of the connection (between Host A and Linux Box A and on the other side Host B and Linux Box B) is not encrypted.

    for an end to end encrypted tunnel you could use:

    linux_box_b$ ssh -g -R *:10022:192.168.1.11:22 [email protected] -p 80
linux_box_b$ ssh -g -L *:10022:192.168.1.11:22 [email protected] -p 80

host_a$ ssh -L 33000:localhost:3000 -p 10022 10.10.10.10

host_b$ ssh -L 33000:localhost:3000 -p 10022 192.168.1.10

    now each host (a&b) will have to use localhost:33000 as their sending destination.

    • 1