Re: [Pan-users] complex question less to do with pan, more to do with internet

[John Morris]

Here's the command I use on the work computer (A):

ssh -l myusername homemachine.homeip.net -N -L 
11900:goliath-east.newsfeeds.com:119 -L 11901:goliath-west.newsfeeds.com:119 
&

This connects to homemachine(B) through ssh.
I set the server in pan to connect to localhost port 11901. This connection is 
forwarded by ssh to (B), and the sshd on the other end in turn makes a 
connection to goliath-west.newsfeeds.com, port 119 (C).   You can also set up 
multiple ports as I have done also.

Actually, I forward much more than just news through this ssh connection.  I 
also foward ports on my home machine to the pop server at work so I can check 
e-mail outside the firewall.  I even forward ssh itself through ssh so I can 
log into the work machine from home outside the firewall.  My machine at work 
has a cron script that runs every 15 minutes to check that the ssh tunnel is 
still alive.  If not it re-establishes the connection.


On Thursday 24 April 2003 11:21 pm, Wolf J. Flywheel wrote:
> On Thursday 24 April 2003 21:00, John Morris wrote:
> > Yeah, ssh is definitely the way to go.  I use it myself to connect to
> > my usenet from work, where they have port 119 blocked on the firewall.
> > I forward a local port to the news server port 119 thru ssh to my home
> > machine, which, which of course doesn't block that port.  Actually, I
> > leave the ssh connection up constantly, and even have a cron script to
> > re-establish the connection if it goes down.
>
>       Let me see if I understand.  You forward from (A) your work box, to (B)
> your home box, to (C) your usenet server?
>
>       I can grasp the (A) --> (B) no problem; I've done SSH from work to home,
> and used it to forward a VNC connection so I can have my pretty GUI at
> work.  However, now the stream has to get from (B) --> (C) so that your
> work box thinks it's doing (A) --> (C).  Unless your usenet provider
> offers SSH-tunneled connections, I'm a bit fuzzy on that -- how do you do
> it?