Thanks to everyone who replied. The answers have clarified my thinking so I can see where I went wrong in pondering the problem. I neglected to mention that the environment behind the firewall is NATed, so I got confused trying to figure out how the client could forward to an internal address.

Of course, the client does NOT resolve the internal address. Instead, it forwards the tunnel request to the SSHD daemon behind the firewall and lets it sort the routing out. And, as William pointed out, all the tunnelling does take place through port 22 on the firewall so there is no need for more ports. Just running multiple tunnels, each to a separate machine, cleanly solves the problem through the one port.

My apologies for wasting bandwidth on my sloppy thinking.
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to