ssh tunnel accross DMZ

gshkedy · 01-05-2006, 02:59 PM

Does anyone know how to create a tunnel accross 2 firewalls.

My datbase server is behind the DMZ and the webserver is also behind a firewall.

I would like to run a gui app on my local machine and need to tunnel accross 2 machines with diffferent passwords.

The network looks like

internet--firewall--webserver--firewall--dbserver

Any ideas on how to access the db server (cannot set up vpn as the firewall are bsd firewalls)

Capt_Caveman · 01-06-2006, 04:18 PM

Do either of the firewalls allow incoming traffic on any ports or even better, can you modify the firewall to allow incoming traffic on a specific port? Using ssh is a great way to tunnel GUI connections.

gshkedy · 01-07-2006, 04:21 PM

the ports are open to allow ssh access. However each machine has a different login (password). How do you set up the tunnel accross the 2machines?

Capt_Caveman · 01-07-2006, 09:16 PM

You could allow normal ssh connections on port 22 to the webserver and then to connect to the db server you could use a second port which is forwarded by the firewall to the db server. On the db server use DNAT to have the second port forwarded locally to port 22.