Re: [Pan-users] complex question less to do with pan, more to do with internet

[John Morris]

Yeah, ssh is definitely the way to go.  I use it myself to connect to my 
usenet from work, where they have port 119 blocked on the firewall.  I 
forward a local port to the news server port 119 thru ssh to my home machine, 
which, which of course doesn't block that port.  Actually, I leave the ssh 
connection up constantly, and even have a cron script to re-establish the 
connection if it goes down.

Since ssh is encrypted, they can't sniff what I'm doing, and since we use ssh 
to connect to customers to do real work, it looks like I'm working really 
hard.....heh heh.


On Thursday 24 April 2003 07:53 am, Wolf J. Flywheel wrote:
> On Thursday 24 April 2003 03:05, Duncan wrote:
> > I don't know how secure LeafNode access can be made, but I know it can
> > be set up on arbitrary ports, as I had access to it thru port 8888 I
> > think it was, rather than the standard NNTP 119, to access it thru
> > firewalls.  Whether it does securely authenticated access I don't know
> > (does PAN?? never had to check)..
>
>       You could use (Open)SSH to forward that port from your work account to
> your home box; Pan would think it's connecting to a local news server,
> but the connection would go from your box, through the firewall, and on
> to the LeafNode pretty much transparently.  Besides that, it's more
> secure and you wouldn't have to worry about changing its setup or that of
> the firewall.
>
>       Come to think of it, with SSH you could probably bypass LeafNode, and 
> use
> SSH to get to Giganews.  However, that would mean using some second
> program to forward from work to Giganews, and I don't know what that
> would be.  (I'm sure such things exist, but I have no clue what you'd
> use.  Netcat?)
>
> Good luck,