[GRLUG] Port Forwarding

megadave megadave at gmail.com
Fri Oct 25 15:34:37 EDT 2013


Man sshd_config

     GatewayPorts
             Specifies whether remote hosts are allowed to connect to ports
             forwarded for the client.  By default, sshd(8) binds remote
port
             forwardings to the loopback address.  This prevents other
remote
             hosts from connecting to forwarded ports.  GatewayPorts can be
             used to specify that sshd should allow remote port forwardings
to
             bind to non-loopback addresses, thus allowing other hosts to
con-
             nect.  The argument may be ``no'' to force remote port forward-
             ings to be available to the local host only, ``yes'' to force
             remote port forwardings to bind to the wildcard address, or
             ``clientspecified'' to allow the client to select the address
to
             which the forwarding is bound.  The default is ``no''.
 On Oct 25, 2013 3:11 PM, "L. V. Lammert" <lvl at omnitec.net> wrote:

> Ran into an interesting problem today, .. on BSD and CentOS 5.4, when a
> reverse SSH tunnel is setup it binds to all IPs on the host:
>
> tcp          0      0  *.2210         *.*   LISTEN
> tcp6         0      0  *.2210         *.*   LISTEN
>
> With a more modern Linux, the *SAME* command binds to 127.0.0.1 ONLY:
>
> tcp        0      0 127.0.0.1:2205          0.0.0.0:*               LISTEN
> tcp        0      0 ::1:2205                :::*                    LISTEN
>
> What must be done on a modern Linux kernel so that incoming connections
> can also use the port?
>
>         Thanks!
>
>         Lee
> _______________________________________________
> grlug mailing list
> grlug at grlug.org
> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shinobu.grlug.org/pipermail/grlug/attachments/20131025/d76d0ccb/attachment.html>


More information about the grlug mailing list