Port forwarding is a process consisting in the translation of a host:port couple into another host2:port2 couple, both submitted to the same network mask.

learn more… | top users | synonyms

78
votes
18answers
130k views

SSH tunneling error: “channel 1: open failed: administratively prohibited: open failed”

When I open this ssh tunnel: ssh -nXNT -p 22 localhost -L 0.0.0.0:8984:remote:8983 I get this error when trying to access the HTTP server running on localhost:8984: channel 1: open failed: ...
11
votes
3answers
13k views

ssh port forward to access my home machine from anywhere

http://serverfault.com/questions/303937/how-to-make-freebsd-box-accessible-from-internet I want to understand this whole process of port forwarding. I read so many things but failing to understand ...
4
votes
2answers
3k views

SSH connection refused from inside my LAN

I'm on Fedora 19 and I have a problem with ssh. Ssh is up and running and I can connect when I enter my lan ip. But when I try my server name (blahblah.no-ip.org) I get a connection refused. No-ip is ...
7
votes
4answers
3k views

How to debug SSH port forwarding

This is an extension to ssh port forward to access my home machine from anywhere I tried things mentioned there but I am not able to ssh to my machine. Netgear router settings for port forwarding: ...
2
votes
1answer
561 views

SSH Connection into LAN without port forwarding?

I'm living inside a study union for the next few month. the organisation has its own network and gateways where the students are connected to the internet. problem: I don't have access to the routers ...
10
votes
1answer
1k views

How can I limit ssh *remote* port forwarding?

I need to limit which ports can be remotely 'ssh -R' forwarded by an user. I know about permitopen option on authorized_keys, but as it says on man page it only limits local 'ssh -L' port forwarding ...
9
votes
2answers
23k views

Port forward to VPN Client?

I've run into a bit of a puzzle and haven't had much luck finding a solution. Right now I am (sadly) connected to the net via Verizon 3G. They filter all incoming traffic so it is impossible for me to ...
5
votes
2answers
1k views

How can I forward traffic from my publicly available server to a computer that is not publicly available?

My home computer is behind an ISP-level NAT which does not allow me to host game servers as a result. I have a VPS which I use as a web server. I want to host a game server of Minecraft, but the VPS ...
9
votes
5answers
8k views

Securely tunnel port through intermediate host

I'm looking to route a port for VNC back to my house here. I have to jump over a single host to then hop to my actual work machine. sittinghere will be my local home machine hopper will by the ...
5
votes
3answers
14k views

SSH tunnelling with multiple dynamic port forwardings

I am trying to monitor multiple JVMs running on different servers through an ssh tunnel. Thanks to one of the UNIX gurus here, I have managed to get this running for a single server by: Run jstatd ...
4
votes
1answer
609 views

What does port forwarding mean in “SSH port forwarding”?

Wikipedia says In computer networking, port forwarding or port mapping is an application of network address translation (NAT) that redirects a communication request from one address and port ...
2
votes
1answer
125 views

Redirect secondary network interface traffic along with port forwarding to tun0 (OpenVPN) using iptables

I have a NAS server which I should do port forwarding for it in order to make its services accessible from internet. However my ISP is blocking ports, so I've managed to buy myself a cheap Ubuntu VPS ...
3
votes
1answer
1k views

Set up password-less SSH tunneling from home computer behind NAT to inside computer behind gateway

My home computer is behind an ISP-level NAT (and firewall). The target computer is work computer behind gateway. You have to log to gateway computer first via SSH (as it is the only one visible and ...
2
votes
1answer
645 views

assigning two ports to one service in firewalld

Is there a way to assign two ports to the same service in firewalld? For example, I would like for the SMTP service to listen on both port 25 and port 465. My first instinct is to change /usr/lib/...
1
vote
3answers
1k views

what does this ssh command mean?

Its an answer I got from questioning about port forwarding but I'm not sure what it means.. $ ssh lab_desktop -L 2200:lab_server:22 -vvv my wild guess: first get connect to lab_desktop and then ...
1
vote
2answers
954 views

Have SSH on port 80 or 443 while webserver (nginx) is running on these ports

I have a remote Linux (Debian) machine which I'd like to access from a very restricted network. In fact the only two open ports are port 80 (for HTTP) and 443 (HTTPS). On this machine I have nginx ...
1
vote
1answer
1k views

OpenVPN port forwarding without router forwarding?

I would like to setup an OpenVPN server with port forwarding on my VPS, because I can not forward ports in my home router. The general question is, if it is even possible to bypass router port ...
1
vote
1answer
73 views

Is a ssh server used in port forwarding considered as a proxy?

In local port forwarding, is the ssh server, client or both proxy (server) ? In remote port forwarding, is the ssh server, client or both proxy (server) ? In dynamic port forwarding, is the ssh ...
1
vote
1answer
2k views

Double port forwarding - SSH

NOTE: I'm not explaining why I want to do this. But here is the requirement. There are 4 hosts. Host A, Host B, Host C, Host D Host A is running some application which can be accessed at port 8001 ...
0
votes
1answer
50 views

iptables selectable tunnel

I have this configuration script: I OPENVPN TUNNELS openvpn --config serverx.ovpn > /dev/null 2>&1 & openvpn --config servery.ovpn > /dev/null 2>&1 & TEST ON MY ...
0
votes
1answer
3k views

Fedora 21 Port Forwarding with firewalld (firewall-cmd); how does it REALLY work? Or, does it?

Fedora's ability to forward ports using the apparently "native" networking software, firewalld, appears to continue to be broken beyond credulity. Please note that it hasn't really worked since at ...