/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
At 05:27 PM 2/21/2001 -0800, Jag wrote:
>/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
>/* ALSO: Don't quote this header. It makes you look lame :-) */
>
>
>On Wed, 21 Feb 2001, Fabrice Gautier wrote:
>
> > /* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
> > /* ALSO: Don't quote this header. It makes you look lame :-) */
> >
> >
> > Hi,
> >
> > I'm using a linux router to masquerade a private LAN.
> >
> > I have some X server on the masqueraded network and I have some X
> > clients on the primary network.
> >
> > Off course as it is now, I can't how to display those clients on the
> > server.
> >
> > Are you aware of any way to do this?
> >
> > Something like "Virtual X Server" on the router ?
>
>Something even better, its called ssh. ssh from the box with the x
>server to the box you want to run the client from. Then just run the
>command without changing any DISPLAY variables. ssh should
>automatically forward the X connection back along the connection opened
>from the box the x server is on, that way it gets through ipmasq.
>
>
>Jag
I'd like to elaborate a little. You need (of course) to have a ssh
server running on the remote mashine. When connecting the ssh server
process ( if this is enabled in both server and client) will start a
"proxy" xhost on the remote maskine and set the DISPLAY variable to
point to this xhost. The "proxy" xhost will accsept the xclient
connection and forward it encrypted to the ssh client who will
send it to the "real" xhost.
So because all this is using the ssh connection initiated from behind
the firewall no changes in the firewall rules ( asumming it allready lets
ssh connections _OUT_) or any port forwaring is required. As an bonus
the DISPLAY wariable is set automaticaly, our X communication will be
proteced by encryption and you dont have to exspose your xhost to the world.
Best Regards
KenR
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
