[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Portforwarding



I usually use SSH for port forwarding.  Its faster than you would think:

First, I set up passwordless logins using RSA or DSA keys to localhost:

# ssh-keygen
# ssh-keygen -d
# cd ~/.ssh
# cat .ssh/identity.pub >> authorized_keys
# cat .ssh/id_dsa.pub >> authorized_keys2

Now SSH wont ask for a password.  On keygen, when it prompts you for a
passphrase, do not enter one, just hit enter.

Next, I create a service with what I want forwarded.  The command for
forwarding example:

ssh -g -f -L 25:192.168.3.14:25 root@127.0.0.1 /usr/bin/jail

Finally, I create the jail script, which looks like this:

#!/bin/bash
while [ 1 ]
do
        sleep 6000
done


And there you have it.  Quick, easy, and quite reliable.

-- 
Arthur H. Johnson II, Debian GNU/Linux Advocate
Catechist, St John Catholic Church, Davison MI USA
President, Genesee County Linux Users Group

IRC:  By-Tor@irc.debian.org,#debian
YIM:  arthurjohnson
AIM:  bytor4232
ICQ:  31770438

On Wed, 3 Jul 2002, Piet Knoester wrote:

> I have a problem in finding the right syntax for portforwarding inbound
> smtp traffic on my Potato box to my email server.
>
> The firewall in front of the mail server is an up-to-date Potato box with 2
> nics: DMZ side 192.168.125.7 and LAN side 192.168.25.9
> The mail server has the ip address: 192.168.25.6
>
> The inbound mail is coming from another firewall at the other side of the
> DMZ and has as the ip addresses 192.168.125.2 and the addres that comes
> from the ISP. This firewall is a Smoothwall GPL with port 25 accepted and
> portforwarding 25 enabled to 192.168.125.7/192.168.25.7 (I tried both). A
> route to  the mail server has been added.
>
> After a lot of tries I'm still unsuccessful and getting desperately.
>
>
> Any suggestions ??     Please
>
>
> Regards,
> Piet Knoester
>
>
>


-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: