search for: portforwarded

...nterface has 10.c.d.e. Problem: When on the LAN, pointing to www.whatever.nl resolves to a.b.c.d for everyone, but the Telco''s stupid system rewrites it to be 10.c.d.e. A packet is sent with source 192.168.0.y and destination 10.c.d.e. It arrives a the firewall, get''s NATTED, and portforwarded. However, the portforwarded destination is on the same interface as the packet came from, and this then generates an icmp unreachable. Is there a way to allow this (on linux 2.2). If not, would 2.4 NAT of the destination address work or have the same simmilar interface problem? Paul, who realises...

Hi all, currently I am considering writing a patch for OpenSSH that will allow portforwarding using the control_master unix domain socket. The idea is to introduce an extra SSHMUX command, SSHMUX_COMMAND_SOCKS, which will then pass control to the normal socks functions used for dynamic forwarding. The main reason for me to write this patch are: - some more control over who gets to connect to

I think everyone will admit that X11 forwarding has been an incredible feature in [open]ssh. X11 is not the only local->remote protocol that might be useful across an SSH session however. But having to hack the code for new protocols as they come around seems silly. Wouldn't it be more useful to be able to describe a protocol that needs forwarding and some configuration that might

Hello, 1) Thanks - shorewall save me a lot of time! 2) I try - exactly: I must :-) - configure a VPN server behind 2 NATs. My situation: RoadWarior - INet - ISP Router (NAT+PortForwarding) - Inetranal Router (running Shorewal, NAT+PortForwarding) - Inetranl VPN Server If RoadWariror try to connect Internal VPN Server then connection failed with "GRE: Bad check chcksum from pppd"

Hi, has anybody seen a patch that provides socks version 5 support for the dynamic portforwarding feature? I?ve seen thats implemented in ssh.com?s ssh version, but found nothing about openssh. Only thing i found was a patch to provide socks4a. cu sleepi

Hello all, I encountered a problem when trying to setup a remote portforward using OpenSSH 3.5p1. If the port that I was trying to listen to on the remote side was already in use, a message 'cannot bind to port: 5000' was written to the syslog, but the connection still persisted. I had no way on the client side to know that the listening wasn't taking place. that is, the

I configured multiple isp (actually only multiple gw) according http://lartc.org/howto/lartc.rpdb.multiple-links.html. Now NAT (Internet) seems to work, both external interfaces work ( I didnt configure load balancing because I dont need it). However I have problem that I can not ping from NAT to public ip of my Linux box. Problem is that I can not connect from 192.168.1.0/24 network to services

Hi ! I hacked together a couple of patches for Openssh 2.1.1p4 port forwarding. It is a one patch file that does the following two things: First: If the server is configured not to allow port forwardings it sends SSH_SMSG_FAILURE (protocol 1) while openssh client expects SSH_SMSG_SUCCESS. When the client gets the failure it exists with protocol error message. This patch will accept both failure

I've got a setup where I run nfs over ssh on several distros, and it's been working like a charm on suse, mandrake, redhat 7-9 etc, but I've been unable to get it to work on CentOS. First I set up ssh portforwarding using: /usr/bin/ssh root@<remotehost> -L 250:irc.dynip.no:2049 -f sleep 60d & Then I mount using the following params in fstab: localhost:/somedir

Hi, I discovered a strange problem with the latest version (2.9.9p2) and previous versions of OpenSSH when using portforwarding und Solaris 8 x86. It seems like the getaddrinfo() function on Solaris 8 x86 is somehow broken, instead of binding a port to 127.0.0.1, OpenSSH tried to bind it to 1.0.0.127 (1.0.0.127 was the ai->ai_addr returned by getaddrinfo() in channel.c). I could not

Anyone know how to set up port forwarding of multiple ports on a DLink DI-604? I successfully portforward the SIP port on the Advanced|Virtual Server page. It works because I can register a SIP client, but it's a single port - 5060. The DLink doesn't seem to provide an obvious way of portfarding the 10000 - 20000 ports needed for RTP. Any ideas? Hugh

Hi developer, i got a problem and need your help!(my english not very good) My KVM host in IDC, and there are some restrict in there lead to me connect to KVM host by port 22 or 16509 impossible. In generally If i want login my KVM host i must login in to a "stepping stones" first, then login to that KVM host.( Now assume that the KVM host ip is 1.1.1.1 and the "stepping

On Sat, Sep 12, 2015 at 04:26:09PM -0700, John R Pierce wrote: > On 9/12/2015 4:16 PM, Fred Smith wrote: > >I'm wanting to close port 22 (ssh) on my home router, and I don't see any > >facilities in its GUI for doing that. > > inbound ports that aren't forwarded are closed by default on most > any/all NAT routers, unless the router itself is listening to said

...rver is behind firewall and i am trying to connect to FWD. i hv configured as mentioned in this link http://www.freeworlddialup.com/advanced/iax. i am able to register my server with FWD. But when i dial 393612, i always get 'No one is available to answer this time, try again later'. I hv portforwarded tcp 4569 and 5060 from my firewall to my asterisk server. Any idea what else is missing. Debug info -- Called fwd/393393612 Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass: AUTHREQ Timestamp: 00015ms SCall: 02703 DCall: 00002 [65.39.205.121:4569] AUTHMETHODS : 3...

Has anyone heavily exercised the TCP connection forwarding features in openssh? I use this feature quite extensively for secure web surfing. I run a ssh command like this: ssh -c blowfish -L3128:127.0.0.1:3128 squidmachine Then I set up Netscape on my local machine to use 127.0.0.1:3128 as a proxy server. Needless to say, this exercises the TCP connection forwarding feature quite heavily. This

Hello I've been using icecast/ices 1.3.11 at home for sometime now, and it works pretty well. Thanks to everyone who has worked on it. Occasionally, icecast will go up to 100% CPU for some reason, but if I restart it this goes away. Ices also has served me well. It dies on occasion too, but I think it's likely due to my custom ices.pm module, since it was much more stable before I

Problem 1 : Incoming conversations from the SIP-provider come into the [default]-context and to the 's'-extension. I am unable to change this, even if I have : sip.conf [general] ;context=default ; Default context for incoming calls register => 092779077:XXXX at 85.119.188.3 ; incoming [092779077] type=user host=85.119.188.3 context=from3starsnet So I define no

All, A bit of background: I work on a QA API on a network that is very choppy (a lot of network interrupts), and we use ssh to do a large part of this automation. This leads to some problems: ssh connections seem to be sensitive to network state, becoming unusable if the choppiness reaches a certain threshold, and either timing out or disconnecting if this happens. Anyways, I stumbled across

Heya, I'm trying to convince my company to use OpenSSH instead of the commercial SSH version. I need a little help: 1. What features does OpenSSH offer over commercial SSH (besides being free and open source of course)? 2. Our lawyers want details on the licensing / patents stuff. I have the high level details from the OpenSSH page. I need the nitty gritty like RSA patent# and

Hello All, I am looking for a sip phone that is capable of automatic nat. The Cisco ata186 for example works fine for natting with iconnecthere, but as for asterisk, both my 7960 and polycom ip600 require you to set the nat ip on the tftp. Does anyone know a good phone (or ata) that can do this automatically? For example, I want to give a phone to my brother, who is going to europe. His ICH