Yes, it's definitely possible to tunnel traffic through an established ssh connection. Probably beyond the scope of what can be explained on the mailing list (not to mention, i have never actually set this up myself and would probably do a poor job of it compared to others on this list). I would just search for 'ssh vpn tun'. There's bound to be information out there by people that have done this at other non linux friendly vpn shops. I have also seen people doing this to get around web filtering, monitoring, etc @work. John On Thu, 2008-06-19 at 07:55 -0400, Rick Bilonick wrote: > On Thu, 2008-06-19 at 01:00 -0400, John Priddy wrote: > > ssh doesnt really have anything to do with ssl vpn or vpn in general for > > that matter. im not sure i fully understand what your asking, but yes, > > you can tunnel traffic through ssh to other ports. see the -L option of > > ssh. of course the ssh port will have to be both open and forwarded > > from the router/firewall to the big bad internet. opening up this > > pretty much defeats the purpose of a vpn/firewall architecture though. > > > > On Thu, 2008-06-19 at 00:48 -0400, Rick Bilonick wrote: > > > On Thu, 2008-06-19 at 00:14 -0400, John Priddy wrote: > > > > Oh, forgot to mention -- if your vendor is on this list, try using > > > > 'vpnc': > > > > > > > > http://www.vpnc.org/member-list.html > > > > > > > > http://www.vpnc.org/ > > > > > > > > > > > > There should be howtos on this all over the web. > > > > > > > > > > > > > > > > > > > > > I'm just curious and maybe completely off base, but is there any way to > > > use ssh to contact the server if I first ssh out from the server? > > > > > > Rick B. > > > > > > > I guess I did not explain well. First, I ssh from the server (which is > behind a firewall) out to my home computer and leave this connection > open. Then when I go home, is there any way that I can use this > connection from home? That is, can I somehow tunnel back through from > home to the server over this connection? I may be totally off base, but > I thought I read somewhere that this could be done. > > Rick B. > -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
