On Monday 02 August 2004 13:05, rich wrote:
> > Do you control firewall?
> >   If yes : use DNAT to redirect external connection to SSH server
> >              (if firewall is NAT box)
> >            or open port 22 and forward connectio to internal hosts
>
> There's a firewall I control (which allows port 22 so long as the SYN
> packet comes from inside), but that's behind a NAT router, so the only way
> to "find" my server on the internet is if IT initiates the connection.

Thats not true.  I have an sshd server sitting on a box behind a NAT firewall 
(netgear router).  I have opened port 22 and told the NAT router to route 
incoming connections on that port to my sshd server.  From outside I then ssh 
to the IP address of the NAT router - it automatically forwards it to the 
internal IP addess of the sshd server.

Once I am there, with controls I can then forward ssh onto other machines on 
my internal network

-- 
Alan Chandler
[EMAIL PROTECTED]
First they ignore you, then they laugh at you,
 then they fight you, then you win. --Gandhi


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to