An SSH tunnel provides an encrypted channel based on the SSH protocol.

learn more… | top users | synonyms

127
votes
3answers
79k views

How does reverse SSH tunneling work?

As I understand this, firewalls (assuming default settings) deny all incoming traffic that has no prior corresponding outgoing traffic. Based on Reversing an ssh connection and SSH Tunneling Made ...
78
votes
18answers
130k views

SSH tunneling error: “channel 1: open failed: administratively prohibited: open failed”

When I open this ssh tunnel: ssh -nXNT -p 22 localhost -L 0.0.0.0:8984:remote:8983 I get this error when trying to access the HTTP server running on localhost:8984: channel 1: open failed: ...
22
votes
2answers
22k views

SSH: tunnel without shell on ssh server

I have to set up a tunnel between two hosts. For this I use ssh in this way: ssh -L MY_LOCAL_PORT:FOREIGN_ADDRESS:FOREIGN_PORT MYUSER@SSH_SERVER after that, I log in to my SSH_SERVER. How can I ...
20
votes
3answers
12k views

How do I know if my ssh tunnel is created successfully?

I rely on the following script tunnel.sh written by others to keep a ssh tunnel alive: #!/bin/bash export SSH_HOST=tim@server if [ ! -f /tmp/.tunnel ] then echo "Creat SSH tunnel" ssh -f -D 9999 $...
19
votes
4answers
11k views

Can I pipe /dev/video over ssh

I have two computers, a desktop in my office ( with a webcam attached ) and a laptop somewhere else on the network. Usually I take a look at my office through my webcam by running ssh Office -Y "...
12
votes
3answers
6k views

How to bring back SSH session that was started with the -f option (run in background)

I'm pretty lost on this. From the man page: -f Requests ssh to go to background just before command execution. After starting SSH with the -f option, I have a working tunnel. But after I ...
12
votes
1answer
8k views

Remote desktop over SSH reverse tunnel to replace TeamViewer

I want to open a remote desktop session from my laptop to desktop over my SSH (reverse) tunnel. That should be simple (or at least doable), right? Until now I've been using Team Viewer to log in to ...
11
votes
3answers
13k views

ssh port forward to access my home machine from anywhere

http://serverfault.com/questions/303937/how-to-make-freebsd-box-accessible-from-internet I want to understand this whole process of port forwarding. I read so many things but failing to understand ...
11
votes
2answers
1k views

Understanding SSH tunnels

I have linux (Ubuntu) server which I have root access to through ssh (port 22) only. On that server there is a MySQL database listening on port 3306. Is it possible to use putty (on my machine) and ...
11
votes
3answers
10k views

ssh to private-ip

I have a computer with CentOS (computer A) that configured as has an private ip 10.150.5.141 (with restricted firewall), can access internet and my ArchLinux VPS (computer B) with real ip w.x.y.z How ...
9
votes
2answers
20k views

What do the channel numbers in ssh error message refer to?

In the example below what do the channel numbers correspond to? Which are on the server? Which are on the client? $ ssh -L1570:127.0.0.1:8899 root@thehost Password: Last login: Fri Aug 9 ...
8
votes
1answer
4k views

SSH over Socks proxy without username or password

I have a list of SOCKS proxy servers from this site. I've read about creating a dynamic tunnels with ssh -D and to be honest i've tried that already. Unfortunately for some reason I cannot connect to ...
8
votes
1answer
4k views

Forward all ports SSH

I have a question about SSH/Port forwarding. I haven't found the solution anywhere and don't know if there is any. I have a server behind my NAT box at home. I have port forwarding from my NAT box to ...
8
votes
1answer
799 views

Work around two-factor SSH auth with Master connection and port forwarding?

The problem 1.0 I'm working on a server that only supports two-factor auth (keypair auth is disabled). So every time my SFTP client wants to upload a file, it asks me for a token... after 3 minutes ...
7
votes
1answer
552 views

self-recovering ssh tunnel over non-100% connection

I want to setup permanent ssh-tunnel for port forwarding to machine behind firewall. The connection is between university network (very reliable) and commercial microwave metropolitan connection to a ...
7
votes
1answer
5k views

How can I forward sound over VNC?

I use TightVNC and Remmina Remote Desktop to connect my Raspberry Pi to my Ubuntu laptop over VNC. It works great for the most part, except for the fact that there is no sound. I have googled all ...
7
votes
1answer
10k views

start autossh reverse tunnel automatically when network comes up

I connect from my home PC thru an Internet server I own to a restricted client (that I also own) using a reverse ssh tunnel. I have a script that sets up the restricted client to middleman leg of ...
7
votes
2answers
878 views

Determine dynamically allocated port for OpenSSH RemoteForward

Question (TL;DR) When assigning ports dynamically for remote forwarding (a.k.a. -R option), how can a script on the remote machine (for instance sourced from .bashrc) determine which ports were ...
7
votes
3answers
3k views

Enabling system management privileges for non-local users - How the heck does `polkit` work, anyways?

I am managing a CentOS 6.2 server remotely using X over SSH (actually NX, but that's just a proxy). The Everything is working correctly, except when I try to do tasks that would normally require ...
6
votes
3answers
5k views

Are there disadvantages in SSH tunneling?

I recently "bought" a VPS that I want to use as a Proxy to be able to use some sites and stuff that I can't reach from germany. Since I was yet too lazy to set up Squid and OpenVPN (which I ...
6
votes
2answers
7k views

Tunnel yum traffic through another server via ssh

I am running a Fedora desktop behind a corporate proxy that is blocking yum traffic (specifically *.gz and *.bz2). I have access to a separate RedHat machine via ssh which can download anything it ...
6
votes
2answers
4k views

how to ssh -Y and then su - <another user> and still forward X applications to your local machine

it is easy enough to 'fetch' (ie draw locally) a remotely running linux application: If I ssh -Y to the remote machine and run an application, that application will surely enough pop up in my local ...
6
votes
3answers
6k views

How can I set up a remote port forward on port 80 to my localhost with the help of setcap?

I'd like to accept connections briefly for development when I'm NATed, and so I'm attempting to do this: $ ssh ubuntu@example.org -R 80:localhost:80 Which fails as I'm trying to bind a port that is ...
6
votes
1answer
4k views

Run X clients over multi-hop ssh tunnel

I've recently converted my home development machine to Linux, and would like to be able to log into it from work if needed. I use a mixture of Linux and Windows machines, and I already have various ...
6
votes
1answer
5k views

I need to RDP to a server through a reverse tunnel

I have a windows PC that is on network A and a windows PC on network B. Also in network B I have several Linux servers. From the PC on network A, I can ssh to any server on network B. I cannot, ...
6
votes
3answers
7k views

How to access a machine behind a restricted NAT gateway I don't manage?

I have a linux machine that I'd like to be able to access remotely for SSH, FTP, HTTP, and so forth. I signed up for Dynamic DNS with No-IP.com, but this isn't adequate because I am on a college ...
6
votes
1answer
3k views

My reverse-ssh tunnel is using keepalives but they're not helping

I have an ssh client machine picard behind multiple unreliable internet connections - all with NAT. I have my server time, reliable with a static IP. I want to be able to access picard thorugh time. ...
6
votes
1answer
1k views

Run SSH SOCKS5 proxy on system startup

I want to setup a linux server (Ubuntu Server 14.04 in this case) to be used as a SOCKS5 proxy by software on another client. Now this is pretty easy by running ssh -f -N -D 0.0.0.0:1080 localhost as ...
5
votes
2answers
2k views

SSH tunnel through middleman server - how to connect in one step (using key pair)?

My question is basically how to turn my existing two steps into one step. I have a working SSH tunnel set up between two computers using a middleman server like this: Kubuntu_laptop--->nat_fw---&...
5
votes
2answers
9k views

Channel 0: open failed: administratively prohibited: open failed

I was doing this tutorial, but when it comes to the part where O should run these commands: local-server# ssh -NTCf -w 0:0 87.117.217.27 local-server# ssh -NTCf -w 1:1 87.117.217.44 It says: ...
5
votes
3answers
961 views

How do I tunnel SSH over SSH?

I have successfully setup a tunnel over SSH on linux mint, and can browse the web. However, when I try to ssh using the same port, I get: Couldn't establish connection to proxy: Network is ...
5
votes
1answer
2k views

How to setup port redirection after a ssh connection has been opened?

I'm using openssh on both client and server. I know I can run ssh -L or ssh -R to setup some port redirections over ssh. However, since they are command-line parameters, such redirections must be ...
5
votes
2answers
386 views

ssh tunnelling explanation

I have a question regarding ssh tunneling. I've read this article http://www.popcornfarmer.com/2009/01/ssh-tunneling-tutorial/ I would like to make X forwarding work and run some X applications ...
5
votes
4answers
4k views

SSH tunnel hanging

I'm trying to use an SSH tunnel from home to a computer in the university so I can access some articles. Both machines are running Ubuntu 11.04, the university machine runs openssh-server. I my ...
5
votes
1answer
2k views

Can sshd restrict client tunnel endpoints to localhost?

Normally an ssh client can request TCP forwarding using the -L command line option. The server can disable this completely using AllowTcpForwarding no. If enabled, the client can request to connect ...
5
votes
1answer
432 views

SSH HTTP Tunnelling

I am trying to set up an SSH account on my server for someone, and I only want to give them access to tunneling internet traffic. I set their user's "shell" to /bin/true, so now when they SSH (and ...
5
votes
1answer
1k views

How to create a SSH tunnel over 2 servers?

I have 2 servers, A and B. I want to create a tunnel from my system to server B but I have some limits to do this. So I have to first tunnel to server A and from server A to server B. My goal is to ...
5
votes
1answer
423 views

SSH tunnel with VNC?

In theory: I have a low-power consuption machine: eee pc, ok. I need to run a virtualized windows xp on it. (Because of a windows-only program..) I need to reach it from a smartphone (Android). The ...
5
votes
2answers
1k views

How can I forward traffic from my publicly available server to a computer that is not publicly available?

My home computer is behind an ISP-level NAT which does not allow me to host game servers as a result. I have a VPS which I use as a web server. I want to host a game server of Minecraft, but the VPS ...
5
votes
2answers
572 views

Is there a xterm equivalent that is optimized for use over VNC?

tl;dr Is there a terminal emulator that uses rectangular copies for scrolling? I'm doing a lot over work over the internet just now (hacking a program on my employer's cluster that can't be ...
5
votes
2answers
1k views

How do I configure ssh tunneling past a firewall?

I have a NAS running Linux behind a firewall at home. I want to access it remotely using a few services such as a Transmission GUI (port 9091) and webmin (port 10000), but through an SSH tunnel on ...
5
votes
1answer
181 views

VPN server (beachhead) without root?

How can I set up a VPN server on a host where I don't have root? I have the following constraints: On the server A, I have no root. I can only operate in my home directory. In particular, I also ...
5
votes
1answer
526 views

Secure access to remote SSH tunnel

So I wish to be able to access my Raspberry Pi (which I keep at home behind a firewall) remotely. One option is to use a static IP address, but as a poor student I don't want to fork out for one, and ...
5
votes
3answers
858 views

tunneling VNC/rdesktop over ssh

I'm having a friend behind a firewall, with a windows computer. I'm having a Linux machine at home which is not behind a firewall. I want to have an rdesktop connection to his machine, without using ...
4
votes
4answers
3k views

Is there a way to have regular expression in ~/.ssh/config

I have two set of server. Test on production. All server have internal ip. currently I am using alias to login: Host pro-10 Hostname 192.168.1.10 ProxyCommand ssh production-server nc %h %p For ...
4
votes
3answers
5k views

MySQL Workbench Cannot start SSH tunnel manager

I don't know why this error is happening when I try to connect by MySQL Workbench. Cannot start SSH tunnel manager. I'm using slackware 14.1 and installed all dependencies.    
4
votes
2answers
188 views

Find which ports a program access

I have a program that tries to connect to a server on start-up on a unknown port. I need to find out which port the program accesses to enable a ssh tunnel. I tried netstat but since the connection ...
4
votes
4answers
4k views

rsync over ssh tunnel

---------- /| /| ------------ | Home | | | | | | Work | | |--------| |---------------------| |-------------...
4
votes
2answers
2k views

How to use rsync with a remote remote host

I am a happy user of rsync -e ssh and use it to synchronize data between my machine and a remote host using rsync -avz -e ssh me@hostA:~/folder ~/folder And this did what I needed until now. I am ...
4
votes
1answer
218 views

Predicting the PID of previously started SSH command

This is the weirdest thing. In a script, I start an SSH tunnel like so: ssh -o StrictHostkeyChecking=no -fND 8080 foo@bar This starts an ssh instance that goes into the background, and script ...