Autossh Tunnel - Revision history

Admin: /* HOW */

2013-07-22T18:56:02Z

HOW

← Older revision		Revision as of 21:56, 22 July 2013
Line 36:		Line 36:

	<code lang="bash">		<code lang="bash">
	/1 * * * flock -xon /root/ssh.lock -c autossh -M 5122 -R 1942:localhost:5522 user@192.168.1.95 -p 5522 -i .ssh/key -N		/1 * * * root flock -xon /root/ssh.lock -c "autossh -M 5122 -R 1942:localhost:5522 user@192.168.1.95 -p 5522 -i .ssh/key -N" >/tmp/autossh_log 2>&1 &
	</code>		</code>

Admin: /* HOW */

2013-07-22T18:51:55Z

HOW

← Older revision		Revision as of 21:51, 22 July 2013
Line 31:		Line 31:

	iptables -A INPUT -p tcp --dport -j DROP		iptables -A INPUT -p tcp --dport -j DROP
			</code>

			Afterwards, you can just add this to your /etc/crontab

			<code lang="bash">
			/1 * * * flock -xon /root/ssh.lock -c autossh -M 5122 -R 1942:localhost:5522 user@192.168.1.95 -p 5522 -i .ssh/key -N
	</code>		</code>

Admin: /* HOW */

2013-07-22T18:35:08Z

HOW

← Older revision		Revision as of 21:35, 22 July 2013
Line 26:		Line 26:

	After this, you can connect from your machine to localhost:1942 and safely do:		After this, you can connect from your machine to localhost:1942 and safely do:

	<code lang="bash">		<code lang="bash">
	iptables -I INPUT -p tcp --dport 5522 -j ACCEPT		iptables -I INPUT -p tcp --dport 5522 -j ACCEPT

	iptables -A INPUT -p tcp --dport -j DROP		iptables -A INPUT -p tcp --dport -j DROP
	</code>		</code>

Admin: /* HOW */

2013-07-22T18:34:55Z

HOW

← Older revision		Revision as of 21:34, 22 July 2013
Line 8:		Line 8:

	Change his login to /sbin/nologin, he doesn't need to get in your box, you need to get into his.		Change his login to /sbin/nologin, he doesn't need to get in your box, you need to get into his.

			Also, on the remote machine, be sure to have your user with a key ( disable the password login ).

	Install autossh on the remote machine.		Install autossh on the remote machine.
Line 19:		Line 21:
	-M is the control port ( 5123 will be the echo port )		-M is the control port ( 5123 will be the echo port )

	1942:localhost:5522 - means that it'll open port 1942 on YOUR machine and will forward everything to port 5522 on THAT machine ( I have ssh set on 5522		1942:localhost:5522 - means that it'll open port 1942 on YOUR machine and will forward everything to port 5522 on THAT machine ( I have ssh set on 5522 )

	The rest is just ssh telling to go login with the user on host 192.168.1.95 on port 5522 ( yes, I have 5522 set up in sshd_config on both my and the remote machine ) with the private key and -N tells not to execute a command ( if it tries to .. it'll fail and disconnect because of /sbin/nologin )		The rest is just ssh telling to go login with the user on host 192.168.1.95 on port 5522 ( yes, I have 5522 set up in sshd_config on both my and the remote machine ) with the private key and -N tells not to execute a command ( if it tries to .. it'll fail and disconnect because of /sbin/nologin )

			After this, you can connect from your machine to localhost:1942 and safely do:
			<code lang="bash">
			iptables -I INPUT -p tcp --dport 5522 -j ACCEPT
			iptables -A INPUT -p tcp --dport -j DROP
			</code>

Admin: /* HOW */

2013-07-22T18:32:46Z

HOW

← Older revision		Revision as of 21:32, 22 July 2013
Line 11:		Line 11:
	Install autossh on the remote machine.		Install autossh on the remote machine.

	<~~script~~ lang="bash">		<code lang="bash">
	autossh -M 5122 -R 1942:localhost:5522 user@192.168.1.95 -p 5522 -i .ssh/key -N		autossh -M 5122 -R 1942:localhost:5522 user@192.168.1.95 -p 5522 -i .ssh/key -N
	</~~script~~>		</code>

	What these mean:		What these mean:

Admin: Created page with "==WHY== Because I want remote access somewhere without others having access to that machine. ==HOW== Create a user on your machine, set his public_key on his account ( ~/.s..."

2013-07-22T18:32:33Z

Created page with "==WHY== Because I want remote access somewhere without others having access to that machine. ==HOW== Create a user on your machine, set his public_key on his account ( ~/.s..."

New page

==WHY==

Because I want remote access somewhere without others having access to that machine.

==HOW==

Create a user on your machine, set his public_key on his account ( ~/.ssh/authorized_keys ). Transfer the private key to THAT machine.

Change his login to /sbin/nologin, he doesn't need to get in your box, you need to get into his.

Install autossh on the remote machine.

<script lang="bash">
autossh -M 5122 -R 1942:localhost:5522 user@192.168.1.95 -p 5522 -i .ssh/key -N
</script>

What these mean:

-M is the control port ( 5123 will be the echo port )

1942:localhost:5522 - means that it'll open port 1942 on YOUR machine and will forward everything to port 5522 on THAT machine ( I have ssh set on 5522

The rest is just ssh telling to go login with the user on host 192.168.1.95 on port 5522 ( yes, I have 5522 set up in sshd_config on both my and the remote machine ) with the private key and -N tells not to execute a command ( if it tries to .. it'll fail and disconnect because of /sbin/nologin )