LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-29-2003, 07:37 PM   #1
rm103
LQ Newbie
 
Registered: Mar 2003
Posts: 1

Rep: Reputation: 0
Post openssh and port forwarding


I have a need to have remote users Telnet into an application server on my network.

I installed openssh (ssh2) on a Mandrake 7.0 system. On the client side using (Putty) and told it to port foward to the application server using its IP address.

I when I connect to the ssh2 server, I authenticate keys (per the log file) enter a password and end up at a prompt.

Is it even possible to connect (via telnet) to a remote app server going through and authenticating with an SSH server without manual intervention of the user such as typing (telnet ip address) at the ssh2 server's prompt ??
 
Old 07-02-2003, 05:05 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
AFAIK you can, in two ways.
First would be adding the command to the commandline you run ssh with, but I don't know if Putty allows adding a command.
Second option would be to add the command to the users authorized keys. See "man sshd" under "authorized_keys file format".
 
Old 07-08-2003, 12:18 AM   #3
mlp68
Member
 
Registered: Jun 2002
Location: NY
Distribution: Gentoo,RH
Posts: 333

Rep: Reputation: 40
There is an easier solution. Your client's machine can port-forward some (highnumbered, then it requires no privileges) port to port 23 on your application server. Say "sshserver.your.net" is the ssh server, and app.your.net is your application server. One can telnet from sshserver to app.

Then the client can type/ make in putty

ssh -L 8199:app.your.net:23 sshserver.your.net
[authenticate by whatever means, keys, password, ... ]

Then, in another window,

telnet localhost 8199

On windows you can forward low-numbered ports w/o privileges, *I think*. You could go 23:app.your.net:23 and then simply telnet localhost.

sshserver and app could be the same machine, but your security is better when they are not.

I strongly recommend to my windows users to install cygwin, then you can type all those commands OR put them into a script. Once in a while some of our techs need to look at some internal webcams from home through ssh tunnels and we made them a bash script for cygwin and it works all the time.

Hope it helps,
mlp
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
IPCHAINS port forwarding and IPTABLES port forwarding ediestajr Linux - Networking 26 01-14-2007 07:35 PM
Simple Port Forwarding Firewall - not forwarding MadTurki Linux - Security 14 04-09-2006 12:08 PM
OpenSSH, Krb5, AD, and TGT Forwarding PenguinPwrdBox Linux - Enterprise 2 04-21-2005 08:45 PM
OpenSSH, Krb5, AD, and TGT Forwarding PenguinPwrdBox Linux - Security 1 04-21-2005 06:13 PM
Limting openssh port forwarding per user onaias Linux - Security 4 01-10-2004 05:56 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:55 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration