Hey everyone.

I want to know if this is possible, and if so how to do it.

Say I have my machine, which wants to connect to a machine outside on the outside world. But it does not have sufficient permissions on the network. However, my machine can access a remote machine on the local intranet that can access the outside machine. How can I, in one command, ssh from my machine to the outside machine, such that I can do port forwarding on it as if I was connected directly.


So, visually:


[My machine] <--/--> [Outside machine]
[My machine] <-----> [Intranet machine]
[Intranet machine] <-----> [Outside machine]

How do I:

[My machine] <----[-I-n-t-r-a-n-e-t- -m-a-c-h-i-n-e]----> [Outside machine]

Thanks, hope I explained well enough..

Ian

Using the -L switch to ssh:
Then just connect to localhost:<localport> and the connection will be forwarded via the SSH pipe, and the middle server will make the request on your behalf

Have a look here:
http://www.securityfocus.com/infocus/1816

Clever, but it still leaves a problem.

I need the -L option to be open, so I can use a command like this (i could do this before I lost these permissions/some software was updated and ssh got blocked by accident)

That was my original command; I need to run that command, but through the intranet machine, as though the intranet machine was not there.

I don't quite understand... Can you give us some more specific details to help me understand?

Yeah, sorry. I know it's confusing.

I have a friend running a service on port 20. I want to forward it (using ssh) to port 4444 on my machine, so that I can point some programs at it to access the service. I cannot make the connection directly because of the firewall in our intranet. Before I lost access over port 22 from my computer to the outside world (reasons unknown; happens to anyone using openSSH for some reason) the command:
worked great.

However, now I am isolated. I can connect to an intermediate server which can connect me to the remote server, as you decsribed like this:
if I am not mistaken.

Is there a way that I could do both of these at the same time? So that I can have my port forwarding through the intermediate host?

Right, getcha now...

I see 3 options:
1) Open 2 port forwards - one on each host - and daisy chain them. Slow and nasty and not what you're really after.
2) Use a different port for SSH between the primary hosts and leave the intermediate out of it.
3) Open your friends port 20 to public access instead of just localhost, then use firewall to restrict the hosts that are allowed to connect.

That's all I can think of - someone else probably has another alternative.