Tugger the SLUGger!SLUG Mailing List Archives

Re: [SLUG] SSH Port Forwarding


On Fri, Aug 17, 2001 at 06:42:58PM +1000, Jeff Waugh wrote:
> Just some random practical documentation written for work purposes, but
> foisted off to SLUG for the benefit of all. Manish Singh has also written
> one specifically for POP3, which you can find at his website:
> 
>   http://yosh.gimp.org/Secure-POP-SSH.html
> 
> Using SSH Port Forwarding
> -------------------------
> 
> Let's not muck around:
> 
>   ssh -f -N -C -L <local-port>:<dest-host>:<dest-port> <gateway-host>

[...useful stuff snipped...]

There is one catch here to be aware of: if you are forwarding ports and
part of the connection is being masqueraded by another box, you may be
bitten by the timeouts on the masquerading (which can be adjusted).

I tend to have a long port forwarding setup running all day at work so
that I can collect mail and use irc and the like. It is useful to run
something like 'watch date' or even write a null byte every 30 seconds
or so just to keep the connection alive. The 'keepalive' option to ssl
should also have the same effect.

Cheers,
Malcolm

-- 
I'm not nearly as think as you confused I am!