Questions tagged [tunneling]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
73
votes
8answers
106k views

Simple way to create a tunnel from one local port to another?

I have a development server, which is only accessible from 127.0.0.1:8000, not 192.168.1.x:8000. As a quick hack, is there a way to set up something to listen on another port (say, 8001) so that from ...
2
votes
1answer
1k views

Dynamic port forwarding using socat

I'm trying to replicate the functionality of ssh -D <PORT> user@machineX to tunnel all my traffic from my current machine via machineX. I do not need the ssh shell open at all, I simply wish to ...
1
vote
1answer
1k views

tun2socks (badvpn) - having trouble with setup

I am attempting to use tun2socks/badvpn to force all traffic through the tun device, but am having some issues. From wireshark, it appears that traffic is indeed going out properly, but not coming ...
7
votes
2answers
13k views

apt-get via ssh-tunnel if only port 22 is allowed

I have a server which has only access to the outer world via port 22 (for the use of ssh from the server to other computers). I want to install some packages via apt-get on this server. Can I achive ...
0
votes
2answers
1k views

SSH Tunneling to VNCServer

I have a dedicated server. There's a VNC Server and I can connect to VNC Server with a VNC Client with port 5901 so it takes me to display :1 when I connect there with a VNC Client. I've read pretty ...
0
votes
1answer
23 views

SSH Tunneling, have some problems [closed]

I have a computer and host A, B. Host A has internet connection and host B placed in host's A local network. Host B has Web Interface at port 8080. I need to forward port on host A. And then i want to ...
0
votes
0answers
30 views

Tunneling TCP via ICMP slowness

There is: Server "A" Server "B" I have root permission on both. They can ONLY ping each other. I installed ptunnel on both. On Server "A", I tried to: ptunnel -p SERVER-B-IP -lp 6969 -da SERVER-...
5
votes
1answer
2k views

How do I configure OpenVPN as a Gateway client for Witopia?

I have the following setup: Witopia SSL account Synology 409 NAS (with OpenVPN and Apache etc) PS3 Mac Apple AirPort router (configured for NAT) Locked IPT-box (using DHCP and NAT traversing) &...
0
votes
1answer
1k views

Can't forward traffic from eth to TUN/TAP

I'm trying to forward traffic from a physical interface enp5s0 to a virtual one tun0. The goal is to make tun0 receive essentially all packets from enp5s0. First, I enable forwarding with a command ...
0
votes
1answer
923 views

GRE not Forwarding origin IP

I've followed the BuyVM Guide found here on creating a GRE Tunnel to protect my main server against DDOS attacks (http://wiki.buyvm.net/doku.php/gre_tunnel) I've followed through this whole guide ...
1
vote
0answers
284 views

How to create a GRE tunnel from IPv4 address to IPv6 address?

Is it possible to tunnel from an IPv4 address to IPv6 address? The IPv6 server is a large server allowed a single IPv4 address but virtually unlimited IPv6 addresses, so I want to connect IP ...
0
votes
0answers
29 views

Forward traffic between two hosts, first with a few IP, second with 1 IP and lxd containers

I have a task to create connections between host A with a few IP addresses, say: 1.2.3.4, 1.2.3.5, 1.2.3.6, 1.2.3.7 host B with 1 IP 2.3.4.5 On host B there two lxd containers lx1, and lx2. The goal ...
0
votes
0answers
52 views

Pernament tunnel at every boot in CentOs 7

I want to have my tunnel UP at every system restart. It is my non persistent solution: ip tunnel add vti0 local 222.222.22.222 remote 33.333.333.333 mode vti key 41 ip link set vti0 up ip addr add ...
0
votes
1answer
129 views

How do I create a persistent tunnel device in sles15 (with or without wicked xml config)

I'm trying to simplify some of my configs for sles15, pushing out tunnel configs to my machines via ansible. Currently whenever I configure a tunnel, I do it on the fly using ssh from the machine ...
2
votes
0answers
179 views

Multiqueue tun/tap interface

I am trying to understand how Multiqueue tuntap interface works. Following the instructions provided at: https://www.kernel.org/doc/Documentation/networking/tuntap.txt I was able to create multiple ...
0
votes
0answers
34 views

ipsec per user id routing

could someone point me out how should look the config of ipsec (libreswan) the way that i could assign a static public ip per user id we use ipsec xauth/psk left (client) ipsec identifier based on ...
0
votes
1answer
386 views

Java KVM Console with an SSH Tunnel Through a Jumphost

I'm trying to use a KVM Console via an SSH tunnel and I'm getting a Connection Refused Java Error. Here is what I'm doing: On my Macbook I am establishing an SSH tunnel to my remote server via a ...
0
votes
1answer
46 views

SSH Tunneling HTTPS traffic through 2 Servers

What I'm trying to determine is how do you tunnel HTTPS traffic through more than 1 host? Normally what I do when I have to jump through 1 host is the following: # URL Access Tunnel: https://127.0.0....
5
votes
2answers
31k views

iptables forward traffic to vpn tunnel if open

I've used the following guide to set up my raspberry pi as an access point: Raspberry Pi 3 as wifi access point I'm forwarding wlan0 to eth0 and NATing all my traffic. Works great! sudo iptables -t ...
2
votes
1answer
2k views

Loading kernel modules that were compiled for another kernel failed

I want to load kernel modules, ip_gre.ko and gre.ko, on a embedded-device running embedded-linux to make that device to support GRE protocol. Since I do not want to change Embedded-linux device's ...
0
votes
1answer
203 views

Security of a SSH tunnel

We have a cluster (currently 10 machines) behind a NAT. There is a NAT gateway/jump-host between the private network and the regular company network. Users can ssh to the jump-host and then get into ...
1
vote
2answers
288 views

How can I SSH into my desktop, which is connected via the university's WiFi? [closed]

I'd like to SSH into my desktop, from my laptop. My desktop is connected to the internet via my university's WiFi. So, it's on a network that I have no control over and its IP changes regularly. ...
1
vote
1answer
684 views

Error using openssl with socat - SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

Short Version of Question Assuming the existence of the relevant files, why does the following sequence of commands not work? socat tcp-listen:10001,fork exec:'/bin/cat' & socat openssl-listen:...
7
votes
1answer
16k views

Uunderstanding tun0 addresses

I have already done some searching and more or less understand what a tun0 interface does. I got the following from various sources, Packets sent by an operating system via a tun/tap device are ...
1
vote
1answer
284 views

OpenVPN or IPtables for split tunnel control?

I have been plugging away but not luck, but from what I understand what I am trying to split tunnel. I have a VPN in place (and working) where all traffic from my LAN heads out to the internet via ...
0
votes
1answer
90 views

SSH: instruct backgrounded tunnel to exit on broken pipe?

I frequently start background SSH tunnels using the ... -f -N -L ... options. This works great, until for example I sleep my machine, or my VPN credentials expire, when the tunnels stop working and I ...
0
votes
1answer
45 views

Two OpenVPN tunnels to different networks configuration setup to work simultaneously for Linux

I have 1 machine that has OpenVPN tunnel setup with 1 external network computer. Now i want to add another external network computer with a new tunnel. Config file for currently operating tunnel ...
1
vote
0answers
162 views

How to keep reversed SSH tunnel alive and safe

I need to SSH to a computer that is behind a NAT. To this end a reverse SSH tunnel from that computer (with SSH server installed) is established to my publicly visible server (middleman.example.org): ...
1
vote
0answers
452 views

IPv6 packets injected on tun interface go up to IPv4 stack

I have a problem about tun interfaces and the IPv6 handling by the kernel. I'm trying to provide IPv6 to the end-users of my network over a pure IPv4 network. Summarizing (just a tunneling background ...
0
votes
0answers
59 views

Using two IP connections in parallel for resilient delivery

I have a mobile Linux server with two LTE connections to the internet, via different providers. The mobile server also acts as a router for other devices, currently using masquerading on just a ...
5
votes
1answer
8k views

Why doesn't FTP work through my ssh tunnel?

Computer A (assumed that ip is 44.44.44.44)can ftp the host 130.89.148.12. ftp 130.89.148.12 Connected to 130.89.148.12. 220 ftp.debian.org FTP server Name (130.89.148.12:debian8): anonymous 331 ...
3
votes
5answers
9k views

SSH into a remote server; but my organization has blocked port 22

I am using RedHat OpenShift server to deploy my WebApps. To access the contents of my application I have to SSH into their server, e.g.: ssh 56555ff90abcdefbf6e000077@appname.rhcloud.com But the ...
6
votes
2answers
1k views

Restart a specific reverse ssh tunnel?

I have multiple machines in the wild that open reverse ssh connections to my server. Each machine out there is using a different reverse ssh port, which I use to differentiate between the machines. I ...
1
vote
1answer
709 views

Reroute mysql connection through external machine

I want (as a first step towards an external mysql proxy) reroute traffic from the local connection of mysql (on a VM) to an external proxy (on the host) which then routes it back to the VM which will ...
2
votes
0answers
81 views

How can I tunnel a ssh command over an http url [closed]

I have to execute bash scripts over an http url. For example I have two serverS in the same network: From server A i want to send this http url: 10.10.10.5/start.sh And in Server B is a the script "...
0
votes
1answer
581 views

ssh reverse tunnel & gateway ports: forwarding users real (public) IP address?

I'm using a reverse tunnel to a public vps so users can connect to my machine at home. However, due to the reason the reverse tunnel works, their IP addresses are shown as local (127.0.0.1) to my ...
1
vote
1answer
5k views

How do I create a tun device for the actual physical network interface?

I am trying to make a C program that will create a tun device interface for my pc physical interface. The entire idea in doing is that when I write any raw packets on my tunnel device, it will put ...
1
vote
0answers
293 views

SSH Tunnel broker over IPV4 for machines behind CNAT

I am not sure if I should be asking this in Unix & Linux or Network Engineering Here is the physical scenario [Host 1]----[Carrier-grade NAT]---->AWS<----[Carrier-grade NAT]----[Host 2] ...
0
votes
1answer
765 views

Assign public ip to every openvpn client

I've configured OpenVPN server which will assign private IP to the requested OpenVPN client. But I want to assign different public IP from the pool to every client. What changes need to be done for ...
1
vote
0answers
979 views

Replace ip tuntap by /etc/network/interfaces (or how to create a tun interface in /etc/network/interfaces)

I'm using a sh script (pasted below) to create an IPv6 tun interface using iproute with the tun mode. #!/bin/sh # Create a new TUN interface for WPAN interaction. ip -6 tuntap add mode tun tun0 # ...
2
votes
1answer
3k views

How can I mount a remote sshfs directory of an publicly inaccessible server on my inaccessible client machine?

This is an extension of the question by @Andrei How to mount remote SSHFS via intermediate machine? Tunneling? I'm in the same situation that I want to mount a remote directory, however the ...
1
vote
0answers
605 views

SFTP connect through an other server

I want to connect to my account in a server of my university. When I’m there I only have to do ssh user@FinalServer/home/user or create a folder using sftp://user@FinalServer/home/user But the ...
1
vote
1answer
8k views

iptables - Allow traffic from GRE tunnel with reject-with option

System: CentOS 7. /etc/sysconfig/iptables is like this: ... -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -i gre1 -j ACCEPT # ...
2
votes
1answer
523 views

How to proxy App over a reverse SSH-Tunnel (multiple hops)

a question to SSH-tunneling. I am trying to proxy Firefox over a Pi, that is in a network behind a NAT. This Pi builds a reverse SSH tunnel to one of my servers, which works pretty well. When proxying,...
19
votes
2answers
33k views

ssh into a server which is connected to a VPN service

I have a virtual private server, which I would like to run a web server while my server is connected to a VPN service When the VPN connection to my provider is not up, I can do anything I want with ...
1
vote
1answer
452 views

How to rsync between two server via their common windows host

We are migrating 100s of gigs of data from in house server to external server. We tried a lot but still those two servers can't talk to each other, probably due to corporate security. The current ...
2
votes
1answer
3k views

Cannot open TUN/TAP, openVPN issues

I have openVPN, and the vm runs fine otherwise. It can connect to the internet, and run localhosts, and all sorts of things. I need access to a vpn through it though. I have my ovpn file, and my ...
1
vote
0answers
247 views

ip tunnel from subnet to local host

I'm very new to Linux networking. I need to set up an IP tunnel so that all udp traffic coming to the 12.x.x.x subnet gets tunneled to a specific ip and port on the same box so that my application ...
1
vote
2answers
1k views

Add default route without gateway nmcli

I'm trying to configure NetworkManager to perform the following action for an interface ip route add ::/0 dev he-ipv6 he-ipv6 is a point-to-point ipv4 sit mode tunnel and running the above command ...
2
votes
1answer
564 views

SSH Configuration Help / Can't tunnel

I have a stock install of Ubuntu 16.04.2 with key based authentication setup and working fine. I've also installed an unmodified mysql-server 5.7.17. I cannot seem to connect to the mysql server via ...