8
votes
SSH known_hosts with a dynamic IP
The known_hosts file is for providing these keys and there's no direct command line alternative (and it wouldn't be so handy, anyway). However, your goal is completely possible with the known_hosts ...
- 44.8k
8
votes
Curl through intermediate server
You could also use a oneliner, this saves you from having to maintain a tunnel in another process.
ssh user@server1 curl http://server2/path -o -
On other words, curl doesn't support ssh tunnels, ...
- 81
7
votes
Accepted
How to workaround a IP whitelist when consuming a 3rd-party API?
A fairly common infrastructure is one where none of the actual application servers have public IPv4 IP-addresses, they will be in a RFC 1918 private network range behind a load-balancer and any ...
- 74.1k
7
votes
OpenVPN persist-tun option - what's the point?
There can be 3 reasons for using persist-tun
1- You need root permissions to be able to manage interfaces. If OpenVPN changes to nobody/nogroup it can't add/remove interfaces. Therefore it would be ...
- 179
6
votes
Accepted
Cannot Delete GRE Tunnel
The gre0 tunnel interface is named as the fallback interface and has special meaning. It's created by ip_gre kernel module at initialization of module. You cannot disable this feature.
When the host ...
- 4,982
6
votes
set up secure connection over SSH
You're connecting to tcp my.server.com:5000, it runs ssh subsystem "app" there. What is being performed is defined by that subsystem (in the ssh server config file). That subsystems could transfer ...
- 9,493
6
votes
Accepted
SSH LocalForward Through Middle Machine
First Check if port 8081 of your web server is accessible from the middle server. If yes then you just have to use ip address of the server instead of localhost in LocalForward configuration. If no ...
- 1,396
6
votes
Accepted
Curl through intermediate server
Curl doesn't have this functionality, and in any case it would have to be a server option. In the case of HTTP, this means configuring a proxy of some kind. If you can't modify the server ...
- 2,432
5
votes
Accepted
How to setup an encrypted L2-Tunnel using MikroTik Routers?
You can accomplish what you ask by using a combination of bridges, EoIP tunnels and IPsec.
First you create an EoIP tunnel on both sides so that both routers can talk to each other.
EoIP is a ...
- 2,442
4
votes
Accepted
What is the bind address used for when forwarding a port via SSH?
What is that bind address good for?
If you have multiple local IP addresses, you can choose one of them to bind the port to.
- 109k
4
votes
Make reachable via a fixed address (e.g. IPv6) a server that is actually connected via a variable IPv4 adress?
You essentially have to chose one of three options:
Use an ISP who will provide you native IPv6 with the static prefix you need.
Forget about self hosting and rent a server in a data center.
Use some ...
- 30.2k
4
votes
Accepted
Forward an FTP/SFTP connection to another server (instead of tunneling from the client)
With HAProxy you can create a TCP proxy to proxy the connection back to the backend server. I do this frequently.
- 1,189
4
votes
How can I use Apache as a reverse proxy for https?
My company uses a CMS system hosted in the cloud. We want to create internally DNS-aliases to make it easier for developers to remember.
If your developers can't follow the link you provide them ...
- 74.1k
3
votes
How do I SSH tunnel using PuTTY or SecureCRT through gateway/proxy to development server?
Using a fairly recent version of SecureCRT (I'm running 7.3.7 for this example), here is how you do it:
1.) Set up a new connection to your jump-off server (ext) with the IP address 1.1.1.1, as given ...
- 131
3
votes
SSH works but tunneling or SFTP doesn't. Why?
ssh tunneling is configured by the ssh-daemon itself. If the SSH daemon does not permit tunneling, you'll need to re-configure it. Typically, it's just running openssh server... and you can edit the ...
- 7,399
3
votes
How to tell if an ssh ControlMaster connection is in use
@Renik's answer didn't work for me. See below for what did.
This works for me using just the socket file for the control master:
$ ssh -o ControlPath=~/.ssh/<controlfile> -O check <bogus ...
- 7,515
3
votes
Accepted
How to make ssh based vpn?
Two and half year left since I asked that question... Now I found another solution which is extremely simple. You can just use tool called sshuttle.
From sshuttle manual:
sshuttle allows you to ...
- 161
3
votes
Routes for two openvpn connections (different hosts) in the same client
Main routing table
Only 1 default route is possible per routing table. If you want to add the routes to the main routing table, then you need to decide which gateway shall be used as default route.
...
- 1,927
3
votes
Accepted
How can I use Apache as a reverse proxy for https?
The answer by HBruijn did explain some of the tricky parts for me, but I have still not been able to solve it. But I have managed to get around the SSL-issue simply by adding
SSLProxyEngine on
...
- 263
3
votes
Accepted
FTP over SSH (not SFTP?) when files are on third server not SSH server
The "conventional" solution for that is to use an FTP client that has SOCKS 5 support and rather than forwarding specific ports over ssh, configure dynamic port forwarding (the ssh client ...
- 1,177
2
votes
Accepted
closing ssh tunnel when using connection sharing without killing ssh?
You can terminate all the shared sessions by issuing -O exit from the client side.
ssh -O exit masterhostname
Sadly there is no way to terminate a specific session and leave the others running.
...
- 7,767
2
votes
How do I set up a port forwarding through SSH?
When using ssh -R 8080:google.com:80 ssh_host
on sshd_config
GatewayPorts yes
should be to listen on wildcard or external interface not just loopback.
2
votes
How would you send syslog *securely* over the public Internet?
I'm using rsyslog with tls.
There is some out of scope prep work: Deploy a local CA, add the CA's cert to each host, generate individual certs for each host. (now all of your hosts can talk ssl to ...
- 735
2
votes
Make reachable via a fixed address (e.g. IPv6) a server that is actually connected via a variable IPv4 adress?
You can run services behind a tunnelled connection but you would need a tunnel for both IPv4 and IPv6 that provides you stable addresses for both address families and that can quickly respond to ...
- 7,672
2
votes
Make reachable via a fixed address (e.g. IPv6) a server that is actually connected via a variable IPv4 adress?
Get a VPN with a fixed address and use this to self-host.
if your "native" IP changes, you will probably have to reconnect your VPN connection;
you can either use "ip rules" to send the outgoing ...
- 1,643
2
votes
Route all Ipv4 traffic over a 6in4 tunnel using RouterOS 6.x
A 6in4 tunnel transports IPv6 packets, so it is not possible to transport IPv4 packets in such a tunnel.
What you can do if you want all your traffic to go through the tunnel is to change your local ...
- 7,672
2
votes
Accepted
set up secure connection over SSH
% ssh -s -p5000 my.server.com app connects to my.server.com, then it runs "app" subsystem in my.server.com
How client/server know that they have to run over SSH secure channel?
SSH secure channel ...
- 677
2
votes
How to workaround a IP whitelist when consuming a 3rd-party API?
I thought I would post a update since the project is now completed successfully using a NAT instance.
Is using "a NAT instance" something I should be looking into? It looks complicated - Is there ...
- 4,187
2
votes
Accepted
OpenVPN: Traffic Redirection not Working
As you said, we spend hours together to debug this...
Regarding all tests we have done and all trace we retrieved, it finally appears that we were experiencing some weird behaviours regarding the ...
- 13.1k
2
votes
Cannot Delete GRE Tunnel
You need to verify that the gre module is completely removed. Run
sudo lsmod | grep gre
to check if the module is in the list. If it is, run
sudo rmmod ip_gre
sudo rmmod gre
to remove them from ...
- 21
Only top scored, non community-wiki answers of a minimum length are eligible