[ILUG] DMZ

[Gavin McCullagh]

Hi,

On Wed, 24 Nov 2010, Brendan Halpin wrote:

> On Wed, Nov 24 2010, Gavin McCullagh wrote:
> 
> > 	B#  ssh -R 22:localhost:10022 -R 445:localhost:10445  A
> 
> Does that have to be root to root? I have remote root login disabled.

The only reason you need root (at either end) is to listen on a reserved
port (port < 1024).  In the above case, the listening is done on port 10022
and 10445 so that's not an issue.  Forwarding packets out to port 22 and
445 doesn't need root.  The listening is done at A, so that would be the
end you would need root if you were to use reserved ports.

> > It might be tidier to look at the ssh-based VPN (see the ssh man page)
> > which will create a little VPN between the two over SSH.  
> 
> That has promise. 

But will need root at both ends, I'm pretty sure as you have to set up Tun
interfaces.

Gavin