[Shorewall-users] ssh port forwarding on firewall how?

Tom Eastep
2002-08-22T21:43:35Z

On Thursday 22 August 2002 02:58 pm, Joe Doran wrote:
> Hi,
>
> Anyone know how to put up a rule to allow ssh port forwarding from ssh
> daemon on the firewall to local network?
>
> I use VNC to attach to hosts inside the local network. The destination
> port used for VNC is always 5900.
>
> So connection would look like:-
>
> net->fw (ssh) / loc(192.168.0.1) -- > host(192.168.0.2:5900)
>
> I have a rule in my setup for:-
>
> ACCEPT          loc       loc           tcp     5900

If sshd is running on the firewall then that rule needs to be:

ACCEPT=09fw=09loc=09tcp=095900

-Tom
--=20
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net