Questions tagged [tunneling]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
73
votes
8answers
107k views

Simple way to create a tunnel from one local port to another?

I have a development server, which is only accessible from 127.0.0.1:8000, not 192.168.1.x:8000. As a quick hack, is there a way to set up something to listen on another port (say, 8001) so that from ...
19
votes
2answers
33k views

ssh into a server which is connected to a VPN service

I have a virtual private server, which I would like to run a web server while my server is connected to a VPN service When the VPN connection to my provider is not up, I can do anything I want with ...
18
votes
2answers
29k views

What is the tun network interface for?

I noticed when running ifconfig that there is a network interface called tun0 and it has an ipv4 address. A bit of research shows that it is a tunneling device, but I don't really know how it's used, ...
14
votes
6answers
35k views

How to route specific addresses through a tunnel?

There are certain websites/services which I can only access from the subnet on which my server is located (think of the typical intranet scenario). Is there a way to transparently route traffic that ...
10
votes
3answers
2k views

Is it possible to expose TCP tunnel in Linux as special character device?

Recently I found in QNX documentation that it allows to set up message based IPC between processes on separate physical machines by using serial device (dev/serX) and it made me wonder: Is it ...
9
votes
1answer
10k views

Forward all ports SSH

I have a question about SSH/Port forwarding. I haven't found the solution anywhere and don't know if there is any. I have a server behind my NAT box at home. I have port forwarding from my NAT box to ...
9
votes
1answer
7k views

How to utilize TUN/TAP tunnel from user program?

I recently discovered the existence of Linux TUN/TAP interfaces and am still trying to understand them. I think I get the basic concept - pseudo devices are created which emulate a network interface ...
7
votes
2answers
13k views

apt-get via ssh-tunnel if only port 22 is allowed

I have a server which has only access to the outer world via port 22 (for the use of ssh from the server to other computers). I want to install some packages via apt-get on this server. Can I achive ...
7
votes
1answer
16k views

Uunderstanding tun0 addresses

I have already done some searching and more or less understand what a tun0 interface does. I got the following from various sources, Packets sent by an operating system via a tun/tap device are ...
7
votes
1answer
13k views

Why are incoming packets on a TAP interface seen with tcpdump but not with iptables?

A program injects packets on a Linux TAP interface (these packets are coming from a virtual machine). Specifically, these are DHCP requests (so they're UDP). I can see the packets with tcpdump but not ...
6
votes
2answers
1k views

Restart a specific reverse ssh tunnel?

I have multiple machines in the wild that open reverse ssh connections to my server. Each machine out there is using a different reverse ssh port, which I use to differentiate between the machines. I ...
5
votes
2answers
31k views

iptables forward traffic to vpn tunnel if open

I've used the following guide to set up my raspberry pi as an access point: Raspberry Pi 3 as wifi access point I'm forwarding wlan0 to eth0 and NATing all my traffic. Works great! sudo iptables -t ...
5
votes
1answer
8k views

Why doesn't FTP work through my ssh tunnel?

Computer A (assumed that ip is 44.44.44.44)can ftp the host 130.89.148.12. ftp 130.89.148.12 Connected to 130.89.148.12. 220 ftp.debian.org FTP server Name (130.89.148.12:debian8): anonymous 331 ...
5
votes
1answer
2k views

Tunnel traffic through another machine over ssh

I want to be able to route a portion of my traffic through another machine over SSH. For example, is it possible to browse the web through the ssh tunnel and also browse the web through your LAN ...
5
votes
1answer
2k views

How do I configure OpenVPN as a Gateway client for Witopia?

I have the following setup: Witopia SSL account Synology 409 NAS (with OpenVPN and Apache etc) PS3 Mac Apple AirPort router (configured for NAT) Locked IPT-box (using DHCP and NAT traversing) &...
4
votes
1answer
5k views

ssh tunnel on ssh tunnel between Windows and two Linux machines

I have the following configuration and want to establish a tunnel on a tunnel. I read already the following topic: How to put a tunnel in a tunnel? My configuration: Notebook --> Linux Server A --...
4
votes
1answer
8k views

stunnel - how to setup stunnel to handle ssl and attach http with it?

I am running Google App Engine which is a http web server with some redirecting and other real-time stuff. But it does not have SSL to include so its unable to make HTTPS. Therefore, i was trying ...
4
votes
1answer
2k views

SSH with a bastion host and different usernames

I want to log into a linux server using two sequential bastion hosts. My .ssh/config file looks something like this: Host * User username0 Host hostname0 Hostname foo Host hostname1 Hostname ...
3
votes
5answers
9k views

SSH into a remote server; but my organization has blocked port 22

I am using RedHat OpenShift server to deploy my WebApps. To access the contents of my application I have to SSH into their server, e.g.: ssh 56555ff90abcdefbf6e000077@appname.rhcloud.com But the ...
3
votes
2answers
320 views

Using reverse SSH tunneling in one step instead of two steps (with -X)

Suppose we have three hosts: miki - my computer behind a NAT vps0 - my VPS mum - computer of my mother, behind a different NAT. The task is to connect from my computer to my mum and keep X11 ...
3
votes
1answer
879 views

“ssh -L <port>” only working from local machine

I mean if I've got something like this: ssh -L 9000:itc.ua:80 andy@localhost It will open port 9000 on my local machine and when I hit http://localhost:9000 in Firefox it will forward to itc.ua:80 ...
3
votes
7answers
7k views

Creating an HTTPS tunnel

I have a VPS. How do I connect to my server through HTTPS protocol and redirect my browser connections to the HTTPS connection? Currently I use SSH tunnel but it's too slow.
3
votes
1answer
4k views

Forwarding packets from loopback interface with policy-based routing

I have the following iptables rule: iptables -t mangle -A PREROUTING -p udp -m udp --dport 10000 -j MARK --set-xmark 0x4/0xffffffff which sets fwmark 4 on all udp packets with destination port 10000....
3
votes
1answer
2k views

List ports tunnelled on OpenSSH server

Is there any way to list the tunnels that SSH clients connected to my OpenSSH server have set up? I can use e.g. lsof -i to show connections that are being actively tunnelled, but I'd like to be able ...
3
votes
0answers
89 views

How to unwrap a tunneled packet in iptables/netfilter and process the tunneled packet

I have a specific question regarding the Linux netfilter/iptables interaction. Let's say I have an IP packet P1 inside of another IP packet P2 (that is, P1 is tunneled). Now, the question is as ...
3
votes
1answer
138 views

What is the best way to create remote tunnel?

I have 3 Linux servers: 10.0.0.0/24 - (10.0.0.10) Linux server inside my LAN. 20.0.0.0/24 - (20.0.0.10) Linux server with HTTP Apache server 50.50.50.50/32 - Server on Amazon AWS which see both ...
3
votes
0answers
324 views

using udptunnel with openvpn

I'm trying to tunnel openvpn traffic (UDP protocol) over a firewall using udptunnel I can't use openvpn itself on TCP protocol. On the server I'm running udptunnel like this: udptunnel -s 9999 127....
2
votes
1answer
3k views

How can I mount a remote sshfs directory of an publicly inaccessible server on my inaccessible client machine?

This is an extension of the question by @Andrei How to mount remote SSHFS via intermediate machine? Tunneling? I'm in the same situation that I want to mount a remote directory, however the ...
2
votes
1answer
972 views

Should OpenVPN point to point tunnels be on different ports?

The OpenVPN cookbook shows an example for site-to-site VPN (3 sites). They configured each tunnel on a unique port: site A to site B: 1194 site A to site C: 1195 site B to site C: 1196 The author ...
2
votes
1answer
807 views

SSH Tunneling - Local and Remote Use Cases

I just learned the basics of SSH tunneling from googling. I saw this interesting question: How does reverse SSH tunneling work? But I still find it a bit confusing, more specifically on the user@...
2
votes
2answers
2k views

Resolving DNS through HTTP/HTTPS

Is there a way to resolve DNS through HTTP/HTTPS, the case was: my ISP redirecting every DNS request to their own DNS and poisoning the DNS records. all I need is a software that could resolve ...
2
votes
1answer
640 views

Networking Tunnel a home server through a dedicated failover IP

I'm setting up a homemade server that will be hosted at a friend's home that have fiber connection (let's call it Home Dedicated Server: HDS), but, I don't want to use his IP connection directly, I ...
2
votes
1answer
2k views

VPN, one server, multiple clients

I wanted to know if it was possible to have a server running OpenVPN with server key and have multiple clients connect to it? I would like the server to be 10.9.8.1, the first client to be 10.9.8.2 (...
2
votes
1answer
525 views

How to proxy App over a reverse SSH-Tunnel (multiple hops)

a question to SSH-tunneling. I am trying to proxy Firefox over a Pi, that is in a network behind a NAT. This Pi builds a reverse SSH tunnel to one of my servers, which works pretty well. When proxying,...
2
votes
1answer
1k views

Tunnel all network traffic through another Linux server

I have two VMs both running Ubuntu 14.04, one is connected to the internet and accessible publicly but the second one is not. Now whenever I want to install something or run apt-get update, it does ...
2
votes
1answer
2k views

Loading kernel modules that were compiled for another kernel failed

I want to load kernel modules, ip_gre.ko and gre.ko, on a embedded-device running embedded-linux to make that device to support GRE protocol. Since I do not want to change Embedded-linux device's ...
2
votes
1answer
195 views

Kernel optimiziations for ioctl AF_INET operations

Our server solution handles many tunnel operation requests (add/update/delete) using the ioctl interface, and the AF_INET address family socket. Aprox. numbers are 100 operations/minute with over 8k ...
2
votes
2answers
942 views

Getting internet to Linux VM without being detected by Network

I'm trying to get internet to a Linux VM (Backtrack 5 on VMWare Workstation). Unfortunately I was told to not "bridge" the connection from the VM because it could be detected by our companies network ...
2
votes
0answers
183 views

Multiqueue tun/tap interface

I am trying to understand how Multiqueue tuntap interface works. Following the instructions provided at: https://www.kernel.org/doc/Documentation/networking/tuntap.txt I was able to create multiple ...
2
votes
0answers
82 views

How can I tunnel a ssh command over an http url [closed]

I have to execute bash scripts over an http url. For example I have two serverS in the same network: From server A i want to send this http url: 10.10.10.5/start.sh And in Server B is a the script "...
2
votes
1answer
3k views

Cannot open TUN/TAP, openVPN issues

I have openVPN, and the vm runs fine otherwise. It can connect to the internet, and run localhosts, and all sorts of things. I need access to a vpn through it though. I have my ovpn file, and my ...
2
votes
1answer
567 views

SSH Configuration Help / Can't tunnel

I have a stock install of Ubuntu 16.04.2 with key based authentication setup and working fine. I've also installed an unmodified mysql-server 5.7.17. I cannot seem to connect to the mysql server via ...
2
votes
0answers
548 views

Why could policy routing on iptables marks applied in FORWARD or OUTPUT chains be inconsistent?

I am routing HTTPS connections down a SSH tunnel (-w) using iptables marks and iproute2 rules, the reasons I need to do it this way are contrived, to say the least, so most alternate solutions may not ...
2
votes
0answers
746 views

More than 255 Linux GRE tunnels

Is it possible to set up more than 255 GRE tunnels in Linux? It seems that 255 is the default maximum, but is there any way to increase the limit?
2
votes
0answers
187 views

debugging iptables when tunneling one VPN through another

I seek to tunnel one SSL VPN (F5, running on my debian laptop==client) through another (OpenVPN, running on a debian linode==server), but lose all client networking (including, e.g., ping) after the ...
2
votes
0answers
2k views

how to open up socks/SSH on different network interfaces?

iptables -A PREROUTING -i usb0 -t mangle -p tcp --dport 8080 -j MARK --set-mark 1 iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD ...
2
votes
0answers
1k views

IPsec Tunnel mode - RoadWarriors configuration

I've the need to configure IPsec tunnel mode between a gateway with static NAT (let's say its public IP is 172.31.0.105) and a number of clients that are behind dynamic NAT. Reading through some ...
2
votes
1answer
2k views

Transparent Ethernet over GRE not forwarding traffic

I am running on Linux 2.6.30.9 and have been trying to setup a transparent ethernet over GRE tunnel. The network topology used is as follows: I want to bridge PC1 and PC2 using Transparent Ethernet ...
2
votes
1answer
1k views

Dynamic port forwarding using socat

I'm trying to replicate the functionality of ssh -D <PORT> user@machineX to tunnel all my traffic from my current machine via machineX. I do not need the ssh shell open at all, I simply wish to ...
1
vote
1answer
8k views

iptables - Allow traffic from GRE tunnel with reject-with option

System: CentOS 7. /etc/sysconfig/iptables is like this: ... -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -i gre1 -j ACCEPT # ...