RE: [MLUG] SSH Remote port forwarding

["Huggard, Arthur Charles \(UMC-Student\)" <EMAIL:PROTECTED>]

As Stephen mentioned, it is most likely doable. Requiring remote port
forwarding just depends on which direction you're making SSH connection.
I'm assuming that programs needing to print are running on central. If
the tunnel is made from central to the remote site, then you would only
use local port forwarding (i.e. bringing a remotely accessible port to
your local machine). If you were setting up the tunnel from the Remote
server, then you would use remote port forwarding (i.e. sending a
locally accessible port to a remote machine). 

Hopefully my awesome ASCII picture & scenario will make everything
clear: 
(I'm assuming a networked printer accessible only to the remote server
over JetDirect (port 9100)) 

-------| ssh -L 1234:printer:9100 EMAIL:PROTECTED  |--------| Port
|---------
Central| ------------------------------------> |"Remote"| 9100 | 
       |       Arrow flows to SSH server       |  Site
|----->|"Printer"
Server | <------------------------------------ | Server |      | 
-------| ssh -R 1234:printer:9100 EMAIL:PROTECTED |--------|
|---------

Once the appropriate SSH tunnel is setup, then any program or user on
Central server, can connect to localhost:1234 and print to the remote
printer (as long as the tunnel remains up). Now if you wanted the other
computers in your central office to print through the same connection,
you would add the "-g" option to your SSH connection, and have them
connect to central:1234. (This would probably additionally require some
tweaking of your ssh config files and/or firewalls). 

Hope this helps,
AC

Charlie Huggard | EMAIL:PROTECTED | 314/591-0087

-----Original Message-----
From: EMAIL:PROTECTED
[mailto:EMAIL:PROTECTED] On Behalf Of Stephen
Montgomery-Smith
Sent: Tuesday, February 06, 2007 6:51 PM
To: MLUG Members
Subject: Re: [MLUG] SSH Remote port forwarding

Mark Rupright wrote:
> Hi All,
> 
> The development team at my workplace are working on centralizing all
of our field office cobol programs to the home office. They have decided
on using SSH for the connection bit and would like to utilize port
forwarding for sending print to the local printers in the field. My
thought is that in order for the server to send print over ssh to the
remote client, it would require remote port forwarding as apposed to
local port forwarding. My second thought is would it work and if not is
there an alternative direction someone could point me to?
> 
> Let me know if clarification is needed.  :-)
> 
> Thanks,
> 
> Mark Rupright
> 
> 
> _______________________________________________
> members mailing list
> EMAIL:PROTECTED
> http://mlug.missouri.edu/mailman/listinfo/members
> 
> 


Is this what you mean?  On local client run (this example is for pop3):

ssh -L 110:remote.host.org:110 remote.host.org

Then any attempts to access port 110 on the local client will become 
attempts to access port 110 on the remote host.  And it all goes through

ssh, so no-one can listen in.


_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members