Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm setting up a Debian web server in my school that people need to be able to access outside of the school (i.e. website needs to be accessible from outside the local network). The problem is, they don't have port 80 open (or really any port except 1723), and they aren't allowed to open it since the school board won't allow it.

My question is: is there any way to do this without port forwarding? I know port 1723 is for PPTP, so is there any way I could use that to make this possible?

I know I could just have the server outside the school and just have it be remotely accessed from everywhere, but the students on the schools WiFi get a very little amount of internet access since it's usually being used by the school's devices, but if they could access the server locally while they were on the school's WiFi then there wouldn't be that issue.

share|improve this question
up vote 0 down vote accepted

If you have another server elsewhere, you could use a ssh tunnel to hop across nat and the firewall:

+--------------------------------------------+        |||         +----------------------------------+
| Server at school                           |        |||         | Server outside network           |
|                               |        |||         |                        |
|   HTTPD on 80                              |--SSH through fw--> |   HTTPD 80 proxy -> localhost:81 |
|   ssh -R 81:localhost:80 holepunch@ |        |||         |   sshd                           |
|   dns ->           |        |||         |   dns ->   |
+--------------------------------------------+        |||         +----------------------------------+
                     ^                                                               ^                 
                     |                                                               |                 
+--------------------------------------------+                    +----------------------------------+
| Client at school looks up    |                    | Client outside school looks up   |
|   and connects directly to the server      |                    | and gets |
+--------------------------------------------+                    |   which is either served from    |
                                                                  |   proxy or forwarded over ssh    |
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.