[Shorewall-users] Configuration for simple ssh forwarding

Tom Eastep
Mon, 27 Oct 2003 08:31:45 -0000

On Mon, 27 Oct 2003, Ferguson, Alex wrote:

> Hello,
>
> I am having difficulties configuring a firewall on a vnc server. Shorewall
> (1.3.14) has been configured as described in the single interface example,
> with an additional rule to permit ssh connections. I can ssh into the box
> normally, but the vnc server doesn''t seem to respond when I try to
forward
> vnc through ssh (ssh -L 5900:localhost:5900 xxx.xxx.xxx.xxx). I believe the
> problem lies in my shorewall configuration and not in sshd, since
everything
> works as expected when I change Shorewall''s default net->fw
policy to
> accept.

"shorewall clear" is a much better way to temporarily disable
Shorewall.

>
> Any insight would be greatly appreciated!
>

The port number is 5900 + "THE DISPLAY NUMBER". So for display number
one, the port number is 5901.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net