I've just noticed that OpenSSH ~4.0 added an extra feature to
-R, and it now binds to localhost by default (rather than
0.0.0.0 and letting the remote side restrict it further).
-R [bind_address:]port:host:hostport
So I think you'll want to use "ssh -R :3000:localhost:2000 [EMAIL PROTECTED]"
(an empty bind_address or '*' means any interface). You'll
still need -a for Dropbear (equivalent to GatewayPorts
mentioned in the ssh manpage).
That works !
I had read the manpage... but that was a few years ago, oops :)
Thanks very much for your help.
(to Wim: local forwarding isn't an option, because bacula currently requires that the backup server connects to the client, not the other way around.)
Cheers,
--
Alex
