Hot answers tagged port-forwarding
21
TL;DR - go to the bottom of the answer, "Applying the restrictions"
Adding a restricted user consists of two parts:
1. Creating the user
2. Configuring the SSH daemon (sshd)
Configuring sshd
The best place to get known to the possibilities of SSH is by reading the related manual pages:
ssh(1)
ssh_config(5)
sshd(8)
sshd_config(5)
Where can SSH client ...
6
I looks like you're not running SSH on port 26 on the second machine. You can either change the port number on that machine to 26 (edit /etc/ssh/sshd_config ... don't forget to restart SSH) or leave it on 22, but forward port 26 on the router to port 22 on the second machine. Also, don't forget to change any firewall settings on the second machine to allow ...
5
You can simply use openssh to do so: https://help.ubuntu.com/community/SSH/OpenSSH/PortForwarding
The commands to look for are -L or -R.
Let's say you want to forward port 4444 on the server to port 5555 on the local machine. On the Server use
ssh -L 4444:local_machine_name:5555 user@local_machine_name
or on the local machine use
ssh -R ...
3
This is possible using iptables. There is a nice howto on linuxhomenetworking.com and more info on iptables can be found on the ubuntu wiki .
Note that there is also a GUI interface to iptables called Firestarter.
3
Just use the Listen directive in your Apache configuration file.
For instance, right now you'll probably have Listen 80, just add Listen 8880 after it:
Listen 80
Listen 8880
and restart Apache.
3
Things to check:
What is the "host" field set to for your MySQL user? If it is localhost or similar then the MySQL server is denying access because you are connecting from an external machine. Change the host field to % to allow connections from any IP (though obviously never use this in a production environment where the guest is accepting connections ...
3
On Ubuntu 11.10, I turned on the 'Desktop Sharing' application that comes with the OS and found that these ports are opened on my computer:
5800/tcp open vnc-http
5900/tcp open vnc
They seem to be just the VNC ports.
If you want to verify this for yourself, download this tool from the repository called nmap:
sudo apt-get install nmap
When you ...
3
The problem with VNC is that in most cases you have at least one firewall between your destination computer and your machine. That's why you are unable to connect unless you are on the same network.
ISPs used to put firewalls on their ends in some cases (eg. mobile internet) but if you use a router to share the internet connection between multiple machines ...
3
You're setting up the redirection incorrectly. To get the SOCKS proxy you need to set up a dynamic redirect -- just one different click (see screenshot). You just need to set the port you want to use on localhost (here, 8888), and leave the remaining as is (n/a).
3
Generally, firewalls don't block local traffic. If your client application connects to port 49100, it expects to find a service (whatever that is) there. So, you need to start the server application (whatever that is) that listens on port 49100 and provides with the service that the client application is expecting to find there.
49100 is not a port ...
2
I use port 22 only for the intranet ssh access.
For access via internet I use a custom (unusual) port.
This has the benefit the I reduce the load produced generated by script kids who are scanning port 22 for "well known usernames"
The external sshd processes are controlled by xinetd and running in parallel to the internal sshd process.
In the following ...
2
If you use the -v option to ssh it will show you what you are forwarding (but it will show you a bunch of other debug messages, too):
ssh -v -L2222:localhost:22 remotehost
Will show you:
...debug messages...
debug1: Authentication succeeded (publickey).
Authenticated to remotehost ([10.0.0.23]:22).
debug1: Local connections to LOCALHOST:2222 forwarded to ...
2
My transmission works w/o messing with settings. 1 thing you do need to do is to open ports on your router. Transmisson has a button to check if the port is open:
If it shows 'port is closed' check your router settings. Mine looks like this:
A BitTorrent client normally associates the TCP port number 6881. However, if this port is busy for some ...
2
Port 80 is the standard HTTP port, so you just have to install a web server (eg. apache2) on your Ubuntu machine. When it comes to the router, you just have to forward port 80 on the router to port 80 on your Ubuntu machine. How to do that depends on the router, but it should be configurable from the web interface.
1
These are couple of things you need to do to accomplish this, that is after you make your web server working.
Know your ISP IP address. You can see this by going to whatismyip.com
If you own a domain and an hosting account that lets you do a Simple DNS Zone Editor modification (CPanel Hosting normally have this)
Add an A record and enter your ISP's IP in ...
1
I'm running a boinc service inside a chrooted debian. I use this script to chroot (argument 1 is the location, like /media/debian)
#!/bin/sh
mount --bind /dev $1/dev
mount --bind /proc $1/proc
mount --bind /sys $1/sys
EMAIL=you@mail.com LANG=C HOME=/root chroot $1
umount $1/dev
umount $1/proc
umount $1/sys
Rerouting proc and sys is necessary in order to ...
1
Try issuing the following commands outside of the chroot. I had to issue these before I could access anything being served from within the chroot, and still have to issue them every time.
iptables -F
iptables -P INPUT ACCEPT
iptables -X ALLOWED_PACKETS
iptables -X ICMPFLOOD
iptables -X INVALID_PACKETS
1
What you basically need is the nufw. Ubuntu's classic default firewall ufw allows just port-based restriction by manipulation of ip-tables. The nufw on the other hand, allows user-based restriction, apart from acting as a classical firewall. Here is the debian link (I'm sure ubuntu repository must also be having this):
...
1
You can install PAC Manager. To install check this link download the .deb file and install it using command sudo dpkg -i <package.deb>
Description grabbed from here
PAC is a Perl/GTK Gnome replacement for SecureCRT/Putty/etc... It
provides a GUI to configure SSH/Telnet connections: users, passwords,
EXPECT regular expressions, macros, etc. You ...
1
2 things i can think of, 1 beeing that the port is not open for your home, another would be that the user on the server was created for your office computer (user@office)
you can test the first with nc -vz host port (default 3306)
second would be to query the mysql.user table and se how your user is defined
mysql> select user,host from mysql.user;
1
Your ISP may block connections to port 22 (nothing you or your router can do about it). Just set SSHd to run on a different port, e.g. 2222.
In /etc/ssh/sshd_config, change Port 22 to Port 2222 and then sudo service ssh restart. Port forward 2222 (or whatever), and try again.
1
Run this on the commandline; it should solve issue: sudo iptables -A INPUT -m conntrack --ctstate NEW,RELATED,ESTABLISHED -j ACCEPT
To do a specific port:
sudo iptables -A INPUT -p <tcp OR udp> <--dport OR --sport> <port> -j ACCEPT
INPUT is the chain for incoming traffic.
-p is protocol (either tcp or udp
--dport or --sport specify ...
1
Person A can use port-forwarding with iptables on his machine, it will allow connections made to his machine 10.0.0.1 to be forwarded to PersonBs machine 172.16.0.1
echo "1" > /proc/sys/net/ipv4/ip_forward
personB=172.16.0.1
personA=10.0.0.1
personA_VM=10.0.0.2
personA_2=172.16.0.2
mysql=3306 # port
### Make all packets from VM to mysql go to ...
1
you have many tools to do this.
you can use Teamviewer , FreeNX,VNC.
Installation of FreeNX:
Open your terminal and paste these lines one by one.
sudo apt-add-repository ppa:freenx-team
sudo apt-get update
sudo apt-get install freenx
wget https://bugs.launchpad.net/freenx-server/+bug/576359/+attachment/1378450/+files/nxsetup.tar.gz
tar -xvf nxsetup.tar.gz
...
Only top voted, non community-wiki answers of a minimum length are eligible
