Questions tagged [tunneling]
The tunneling tag has no usage guidance.
0
votes
0answers
17 views
Forward traffic between two hosts, first with a few IP, second with 1 IP and lxd containers
I have a task to create connections between host A with a few IP addresses, say:
1.2.3.4,
1.2.3.5,
1.2.3.6,
1.2.3.7
host B with 1 IP
2.3.4.5
On host B there two lxd containers lx1, and lx2. The goal ...
0
votes
0answers
32 views
Pernament tunnel at every boot in CentOs 7
I want to have my tunnel UP at every system restart.
It is my non persistent solution:
ip tunnel add vti0 local 222.222.22.222 remote 33.333.333.333 mode vti key 41
ip link set vti0 up
ip addr add ...
0
votes
1answer
63 views
How do I create a persistent tunnel device in sles15 (with or without wicked xml config)
I'm trying to simplify some of my configs for sles15, pushing out tunnel configs to my machines via ansible. Currently whenever I configure a tunnel, I do it on the fly using ssh from the machine ...
2
votes
0answers
99 views
Multiqueue tun/tap interface
I am trying to understand how Multiqueue tuntap interface works. Following the instructions provided at: https://www.kernel.org/doc/Documentation/networking/tuntap.txt
I was able to create multiple ...
0
votes
0answers
33 views
ipsec per user id routing
could someone point me out how should look the config of ipsec (libreswan) the way that i could assign a static public ip per user id
we use ipsec xauth/psk
left (client) ipsec identifier
based on ...
0
votes
1answer
220 views
Java KVM Console with an SSH Tunnel Through a Jumphost
I'm trying to use a KVM Console via an SSH tunnel and I'm getting a Connection Refused Java Error. Here is what I'm doing:
On my Macbook I am establishing an SSH tunnel to my remote server via a ...
0
votes
1answer
37 views
SSH Tunneling HTTPS traffic through 2 Servers
What I'm trying to determine is how do you tunnel HTTPS traffic through more than 1 host? Normally what I do when I have to jump through 1 host is the following:
# URL Access Tunnel: https://127.0.0....
1
vote
2answers
172 views
How can I SSH into my desktop, which is connected via the university's WiFi? [closed]
I'd like to SSH into my desktop, from my laptop. My desktop is connected to the internet via my university's WiFi. So, it's on a network that I have no control over and its IP changes regularly.
...
1
vote
1answer
521 views
Error using openssl with socat - SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small
Short Version of Question
Assuming the existence of the relevant files, why does the following sequence of commands not work?
socat tcp-listen:10001,fork exec:'/bin/cat' &
socat openssl-listen:...
0
votes
1answer
65 views
SSH: instruct backgrounded tunnel to exit on broken pipe?
I frequently start background SSH tunnels using the ... -f -N -L ... options. This works great, until for example I sleep my machine, or my VPN credentials expire, when the tunnels stop working and I ...
1
vote
1answer
240 views
OpenVPN or IPtables for split tunnel control?
I have been plugging away but not luck, but from what I understand what I am trying to split tunnel. I have a VPN in place (and working) where all traffic from my LAN heads out to the internet via ...
0
votes
1answer
978 views
Can't forward traffic from eth to TUN/TAP
I'm trying to forward traffic from a physical interface enp5s0 to a virtual one tun0. The goal is to make tun0 receive essentially all packets from enp5s0.
First, I enable forwarding with a command
...
1
vote
0answers
132 views
How to keep reversed SSH tunnel alive and safe
I need to SSH to a computer that is behind a NAT. To this end a reverse SSH tunnel from that computer (with SSH server installed) is established to my publicly visible server (middleman.example.org):
...
0
votes
0answers
54 views
Using two IP connections in parallel for resilient delivery
I have a mobile Linux server with two LTE connections to the internet, via different providers.
The mobile server also acts as a router for other devices, currently using masquerading on just a ...
0
votes
1answer
41 views
Two OpenVPN tunnels to different networks configuration setup to work simultaneously for Linux
I have 1 machine that has OpenVPN tunnel setup with 1 external network computer. Now i want to add another external network computer with a new tunnel.
Config file for currently operating tunnel
...
2
votes
0answers
75 views
How can I tunnel a ssh command over an http url [closed]
I have to execute bash scripts over an http url. For example I have two serverS in the same network:
From server A i want to send this http url:
10.10.10.5/start.sh
And in Server B is a the script "...
0
votes
1answer
537 views
ssh reverse tunnel & gateway ports: forwarding users real (public) IP address?
I'm using a reverse tunnel to a public vps so users can connect to my machine at home. However, due to the reason the reverse tunnel works, their IP addresses are shown as local (127.0.0.1) to my ...
1
vote
1answer
4k views
How do I create a tun device for the actual physical network interface?
I am trying to make a C program that will create a tun device interface for my pc physical interface. The entire idea in doing is that when I write any raw packets on my tunnel device, it will put ...
0
votes
1answer
191 views
Security of a SSH tunnel
We have a cluster (currently 10 machines) behind a NAT. There is a NAT gateway/jump-host between the private network and the regular company network.
Users can ssh to the jump-host and then get into ...
1
vote
0answers
262 views
SSH Tunnel broker over IPV4 for machines behind CNAT
I am not sure if I should be asking this in Unix & Linux or Network Engineering
Here is the physical scenario
[Host 1]----[Carrier-grade NAT]---->AWS<----[Carrier-grade NAT]----[Host 2]
...
0
votes
1answer
685 views
Assign public ip to every openvpn client
I've configured OpenVPN server which will assign private IP to the requested OpenVPN client. But I want to assign different public IP from the pool to every client. What changes need to be done for ...
1
vote
0answers
891 views
Replace ip tuntap by /etc/network/interfaces (or how to create a tun interface in /etc/network/interfaces)
I'm using a sh script (pasted below) to create an IPv6 tun interface using iproute with the tun mode.
#!/bin/sh
# Create a new TUN interface for WPAN interaction.
ip -6 tuntap add mode tun tun0
# ...
2
votes
1answer
484 views
How to proxy App over a reverse SSH-Tunnel (multiple hops)
a question to SSH-tunneling. I am trying to proxy Firefox over a Pi, that is in a network behind a NAT. This Pi builds a reverse SSH tunnel to one of my servers, which works pretty well.
When proxying,...
1
vote
1answer
409 views
How to rsync between two server via their common windows host
We are migrating 100s of gigs of data from in house server to external server. We tried a lot but still those two servers can't talk to each other, probably due to corporate security. The current ...
1
vote
1answer
2k views
Cannot open TUN/TAP, openVPN issues
I have openVPN, and the vm runs fine otherwise. It can connect to the internet, and run localhosts, and all sorts of things. I need access to a vpn through it though. I have my ovpn file, and my ...
1
vote
0answers
234 views
ip tunnel from subnet to local host
I'm very new to Linux networking.
I need to set up an IP tunnel so that all udp traffic coming to the 12.x.x.x subnet gets tunneled to a specific ip and port on the same box so that my application ...
2
votes
1answer
529 views
SSH Configuration Help / Can't tunnel
I have a stock install of Ubuntu 16.04.2 with key based authentication setup and working fine. I've also installed an unmodified mysql-server 5.7.17. I cannot seem to connect to the mysql server via ...
2
votes
1answer
549 views
Networking Tunnel a home server through a dedicated failover IP
I'm setting up a homemade server that will be hosted at a friend's home that have fiber connection (let's call it Home Dedicated Server: HDS), but, I don't want to use his IP connection directly, I ...
10
votes
3answers
2k views
Is it possible to expose TCP tunnel in Linux as special character device?
Recently I found in QNX documentation that it allows to set up message based IPC between processes on separate physical machines by using serial device (dev/serX) and it made me wonder:
Is it ...
0
votes
2answers
1k views
SSH Tunneling to VNCServer
I have a dedicated server. There's a VNC Server and I can connect to VNC Server with a VNC Client with port 5901 so it takes me to display :1 when I connect there with a VNC Client.
I've read pretty ...
1
vote
2answers
941 views
Add default route without gateway nmcli
I'm trying to configure NetworkManager to perform the following action for an interface
ip route add ::/0 dev he-ipv6
he-ipv6 is a point-to-point ipv4 sit mode tunnel and running the above command ...
1
vote
0answers
436 views
IPv6 packets injected on tun interface go up to IPv4 stack
I have a problem about tun interfaces and the IPv6 handling by the kernel.
I'm trying to provide IPv6 to the end-users of my network over a pure IPv4 network. Summarizing (just a tunneling background ...
1
vote
0answers
446 views
Trying to “reverse proxy” requests to a VPS IP to an internal server over OpenVPN, how to do the routing tables automatically?
Brief description
I've got two systems, a VPS which is connected directly to the internet, and a system in my basement behind my router (NAT). I'd like to take the VPS and forward all requests on one ...
1
vote
0answers
265 views
How to create a GRE tunnel from IPv4 address to IPv6 address?
Is it possible to tunnel from an IPv4 address to IPv6 address?
The IPv6 server is a large server allowed a single IPv4 address but virtually unlimited IPv6 addresses, so I want to connect IP ...
4
votes
1answer
2k views
SSH with a bastion host and different usernames
I want to log into a linux server using two sequential bastion hosts.
My .ssh/config file looks something like this:
Host *
User username0
Host hostname0
Hostname foo
Host hostname1
Hostname ...
1
vote
1answer
7k views
iptables - Allow traffic from GRE tunnel with reject-with option
System: CentOS 7.
/etc/sysconfig/iptables is like this:
...
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i gre1 -j ACCEPT # ...
1
vote
1answer
520 views
TCP over TUN: SYN/ACK is received, but no ACK is generated, and socket remains in SYN_SENT state
I am tunneling an outgoing TCP connection over a TUN interface set up by a program I wrote. The TUN interface basically just relays the packets to/from a proxy server, with minimal modifications (...
4
votes
2answers
28k views
iptables forward traffic to vpn tunnel if open
I've used the following guide to set up my raspberry pi as an access point:
Raspberry Pi 3 as wifi access point
I'm forwarding wlan0 to eth0 and NATing all my traffic. Works great!
sudo iptables -t ...
0
votes
0answers
489 views
wget probelm with a tunnel connection using ssh
I know this is not a new question, but I have researched a bit and so far none of the answers I've seen gave me the answer.
I have this situation:
I´m working on a campus where the network is highly ...
1
vote
1answer
1k views
tun2socks (badvpn) - having trouble with setup
I am attempting to use tun2socks/badvpn to force all traffic through the tun device, but am having some issues. From wireshark, it appears that traffic is indeed going out properly, but not coming ...
1
vote
1answer
669 views
Reroute mysql connection through external machine
I want (as a first step towards an external mysql proxy) reroute traffic from the local connection of mysql (on a VM) to an external proxy (on the host) which then routes it back to the VM which will ...
2
votes
0answers
488 views
Why could policy routing on iptables marks applied in FORWARD or OUTPUT chains be inconsistent?
I am routing HTTPS connections down a SSH tunnel (-w) using iptables marks and iproute2 rules, the reasons I need to do it this way are contrived, to say the least, so most alternate solutions may not ...
1
vote
0answers
118 views
Can I change owner of a tunnel after creating it?
I've been trying to finagle pytun to do my bidding in creating persistent ssh tunnels, but I very much do not want these to be owned by root and unless I modify the python package myself (which as a ...
1
vote
1answer
510 views
Confirming that a reverse ssh tunnel has been established
I have a reverse ssh tunnel established between a client and a server computer. The client connects on the server on port 22, and creates a reverse ssh tunnel on port 4030.
After the client computer ...
3
votes
5answers
9k views
SSH into a remote server; but my organization has blocked port 22
I am using RedHat OpenShift server to deploy my WebApps.
To access the contents of my application I have to SSH into their server, e.g.:
ssh 56555ff90abcdefbf6e000077@appname.rhcloud.com
But the ...
0
votes
0answers
107 views
How to get informed about EVERY incoming ssh connection (e.g. with no remote command specified)
The case
I'm used to set up automatic reverse ssh tunnels to remote computers via my server with cron.
Usually I use the following entry:
@reboot sleep 300 && ssh -MNf -R xxx22:host:22 user@...
5
votes
1answer
7k views
Why doesn't FTP work through my ssh tunnel?
Computer A (assumed that ip is 44.44.44.44)can ftp the host 130.89.148.12.
ftp 130.89.148.12
Connected to 130.89.148.12.
220 ftp.debian.org FTP server
Name (130.89.148.12:debian8): anonymous
331 ...
0
votes
2answers
394 views
set up secure connection over SSH
I'm setting up a server application which requires to establish a secure connection over SSH2, e.g. a client must open SSH2 connection to the server to reach specific application:
% ssh -s -p5000 my....
0
votes
1answer
735 views
Is port forwarding always used in proxy server, gateway and tunneling?
It seems to me that proxy server, gateway and tunneling all forward traffic that they receive to the actual destinations. So is port forwarding always used in proxy server, gateway and tunneling, or ...
18
votes
2answers
30k views
ssh into a server which is connected to a VPN service
I have a virtual private server, which I would like to run a web server while my server is connected to a VPN service
When the VPN connection to my provider is not up, I can do anything I want with ...
