- To: Penguinillas <slug@xxxxxxxxxxx>
- Subject: Re: [SLUG] SSH Port Forwarding
- From: Malcolm Tredinnick <malcolm@xxxxxxxxxxxxxxxxx>
- Date: Fri Aug 17 19:11:02 2001
- User-agent: Mutt/1.2.5i
On Fri, Aug 17, 2001 at 06:42:58PM +1000, Jeff Waugh wrote:
> Just some random practical documentation written for work purposes, but
> foisted off to SLUG for the benefit of all. Manish Singh has also written
> one specifically for POP3, which you can find at his website:
>
> http://yosh.gimp.org/Secure-POP-SSH.html
>
> Using SSH Port Forwarding
> -------------------------
>
> Let's not muck around:
>
> ssh -f -N -C -L <local-port>:<dest-host>:<dest-port> <gateway-host>
[...useful stuff snipped...]
There is one catch here to be aware of: if you are forwarding ports and
part of the connection is being masqueraded by another box, you may be
bitten by the timeouts on the masquerading (which can be adjusted).
I tend to have a long port forwarding setup running all day at work so
that I can collect mail and use irc and the like. It is useful to run
something like 'watch date' or even write a null byte every 30 seconds
or so just to keep the connection alive. The 'keepalive' option to ssl
should also have the same effect.
Cheers,
Malcolm
--
I'm not nearly as think as you confused I am!