[Voyage-linux] Reverse SSH Tunnels

[Robert]

Hi Jordi,

Thanks for the suggestion. VPN sounds like an interesting idea, I'm worried that it's a little overkill for what we need though?

We simply need to gain SSH access from the outside world, we don't need any other inbound services.

How easy is it to configure a VPN connection that is self-maintaining, so we can ensure it's always up?

Thanks,

Robert


On 23/08/2010 10:31, "Jordi Soucheiron" <jsoucheiron at dexmatech.com> wrote:

Hi Robert,
There are several ways to do what you're asking, but provably you'll want to use openvpn with a custom configuration for each client (to be able to set a static ip to every single system) instead of reverse ssh tunnels.
Have a nice day
Jordi Soucheiron
Software Engineer

DEXMA
Parc Tecnològic la Salle
Sant Joan de la Salle, 42
08022 Barcelona
t/f: [+34] 93 181 01 96
www.dexmatech.com <http://www.dexmatech.com>
jsoucheiron at dexmatech.com
2010/8/23 Robert <Robert at supporttime.com>
Morning Everyone,

I hope you all had a good weekend.

I'm playing around today with reverse SSH tunnels. We often place our systems behind a client firewall and sometimes we don't have access to configure port forwarding so that we can gain SSH access to our system from the outside world.

I understand that reverse SSH tunnels would allow me to do this? I can configure our system to create a tunnel to the outside world which we can then use to bypass the firewall to gain access, is that correct?

I've done some reading and it would seem that creating the reverse SSH tunnel is very simple. However, I need to ensure that the connection is established and maintained at all times.

Does anyone have any experience with doing this?

Thanks,

Robert

_______________________________________________
Voyage-linux mailing list
Voyage-linux at list.voyage.hk
http://list.voyage.hk/mailman/listinfo/voyage-linux



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://list.voyage.hk/pipermail/voyage-linux/attachments/20100823/e3ba5305/attachment.html>