OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Reverse SSH tunelling

From: Steffen Kluge (klugefujitsu.com.au)
Date: Fri Aug 27 2004 - 01:19:00 CDT


On Thu, 2004-08-26 at 12:50, Raistlin Majere wrote:
> Security os pf the utmost concern, so I need
> some sort of encrypted tunnel, hence the thought of ssh, but I don't
> know how to do this 'reverse' tunnel...

On all of the 50 remote servers create SSH DSA keys (as yourself) and
add their public parts to file ~someone/.ssh/authorized_keys on the
central server. Then run something like:

[yourself ~]$ ssh -N -R 123nn:127.0.0.1:22 someonecentral-server &

(nn = 01..50)

Then, from the central server, use:

$ ssh -p 123nn localhost

to connect to remote server nn.

Cheers
Steffen.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQBBLtJU5/imOLer75QRAnQhAJ9wY80IEj6Bw8jtUfI93oMwRdALqACfdG8F
7kZzPMn2Qtk0c0g3gVcnldc=
=bjIO
-----END PGP SIGNATURE-----