Re: Need Advice in SSH

2004-05-09 Thread Rob
Bull TORS wrote:
Hello,

I was hoping if anyway could give me advice, hints, and anything about this 
question of mine.

laptop1.mydomain.org<-?ssh?--->   laptop2.mydomain.org
Static IP Address from the  DHCP client of my ISP
Company LAN Server with
a different domain (companydomain.org)
You've triggered my curiosity and I've tried a bit myself with ssh.
I've come a little further. Imagine this network setup:
PC1 -- Gateway -//-PC2

PC1: 10.0.0.N on a local network
PC2: has world-wide IP address, say: x.y.z
Then you can do on PC1:

   ssh -N -f -R 2200:localhost:22 x.y.z

which will create an ssh-tunnel from PC1 to PC2 as a background process,
and will force PC2 to listen on port 2200, which will be connected to
port 22 on PC1.
After establishing this tunnel, you can do on PC2:

  ssh -p 2200 localhost

and you connect directly to PC1.

In this process, you do not need any login/password on the gateway!!

Exchanging public keys of the two PCs, will skip the password checking.
You also can add lines in ~/.ssh/config, to shorten the last command.
I know in your case, both PCs are on a local network and there are two
gateways inbetween. So this is not the final solution to your problem,
but it may help you understand what way to go with ssh.
I remember you had login/password of one gateway, which certainly may
make things easier.
I hope all this helps a bit.

Rob.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Need Advice in SSH

2004-05-05 Thread Rob
Bull TORS wrote:
Thanks for the response...I have tried to use ssh before but everytime I did a 
message always says "operation timed out"...and I could not know what went
Try "ssh -v ..." to see debugging messages while ssh tries to establish the
connection. You may also try "ssh -v -v ..." or "ssh -v -v -v ..." to
increase its verbosity.
If you don't understand the output, then share it with this list and
people may tell you what's going wrong in more detail.
R.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Need Advice in SSH

2004-05-05 Thread Rob
Bull TORS wrote:
could finish the last phrase of my sentence, they would say "Oh, your not 
using Windows! so you are using Linux!..." "Why use strange 
things?"...Imagine that Linux sounds strange to them, what would happen if I 
start explaining what FreeBSD is!...Hehehe...And the person in-charge on our
You're in Japan, right?
FreeBSD used to be very common in Japan at some point for its support for
the Japanese character sets. What happened to its popularity?
I myself am in Korea. Despite news items that the opensource community
is gaining fields in East-Asia, too many people frown their eyebrows when
talking another language than MS-Windows, even at the university :(.
Indeed, this IS the place to ask questions, if you get stuck and noone
in your environment is able or willing to help!
Printer problems?
Have you installed CUPS? That will solve lots of the UNIX printer oddities.
It's in the ports and has a decent manual. If that is not clear enough, then
send your Qs to this list.
Good luck!

R.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Need Advice in SSH

2004-05-05 Thread Bull TORS
On Thursday 06 May 2004 12:44, Kevin Stevens wrote:
> On May 5, 2004, at 20:24, Bull TORS wrote:
> > My laptop in the office (laptop1.mydomain.org) has a static internal
> > network
> > address 192.168.1.35 from my company's (companydomain.org) LAN Server.
> > My laptop in my home has 192.168.1.x (I am not that sure if it changes
> > a lot
> > but I think not) as a DHCP client from my ISP (ispdomain.ne.jp).
> > So I think both gets internal network addresses from their respective
> > servers,
> > one as a static client and the other as a dynamic client from different
> > domains.  Does this mean I can not use ssh from either both PC's?
>
> No, but you need more information.  Some device on each end is
> translating those non-routable private addresses to public ones usable
> on the Internet.  Almost certainly, at least one and probably both are
> blocking inbound SSH connections by default.
>
> It is more likely that you can initiate outbound connections from your
> company's network, and can configure your home network to permit
> inbound connections.
>
> It is much less likely that you will be able to have your company
> network configured to permit inbound connections initiated from your
> home computer.
>
> In either case, you need more detailed information on the
> configurations.  Talk to the IT staff at your company and explain what
> you're trying to do and ask if they permit outbound SSH sessions.  At
> your home, in my experience it's very uncommon for an ISP to provision
> either DHCP or private addresses directly - it's more common for there
> to be a local device in your home that is accomplishing that.  But talk
> to your ISP, it could be different in Japan.
>
> Properly speaking, this has little or nothing to do with FreeBSD, BTW,
> it is general firewall, NAT and SSH information.
Thanks for the response...I have tried to use ssh before but everytime I did a 
message always says "operation timed out"...and I could not know what went 
wrong...I have read the handbook and have found information using google 
before trying it and it seems that it was not working...I had to let it go 
for awhile or maybe gave up on it...but then it just keeps coming back to me 
because there are times when I really need to access my pc at home to 
administer it...That is why I posted my Email...just asking if it is really 
possible...Now, that I found out that it is going to take more reading and 
maybe try my settings in a different environment (if I am lucky)...
Again, thanks for the reply...and my apologies for taking some of your 
minutes...

Have a nice day guys...

Bull TORS
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Need Advice in SSH

2004-05-05 Thread Bull TORS
On Thursday 06 May 2004 12:50, Rob wrote:
> Bull TORS wrote:
> > My laptop in the office (laptop1.mydomain.org) has a static internal
> > network address 192.168.1.35 from my company's (companydomain.org) LAN
> > Server. My laptop in my home has 192.168.1.x (I am not that sure if it
> > changes a lot but I think not) as a DHCP client from my ISP
> > (ispdomain.ne.jp). So I think both gets internal network addresses from
> > their respective servers, one as a static client and the other as a
> > dynamic client from different domains.  Does this mean I can not use ssh
> > from either both PC's?
>
> My knowledge of ssh is just to the level of a regular user, so I may be
> wrong here. But in this case I am afraid you can only connect the two
> computers if you also have access (login & password) to each one of the
> gateways, in which case you can make use of ssh-tunnels.

Thank you again for your response...Really gives people like me the confidence 
to ask in this mailing list...
I know that we are connected to an ADSL modem and we are renting a router 
device to act as our gateway...I know the login & password for the router and 
I can possibly change the settings BUT, this is where my problem is...
I have been using FreeBSD for the last 7-8 months now since I threw away my MS 
Windows CD's because I have finally found the OS that was meant to be mine.
Since I have been using FreeBSD, I still have not configure my printer 
settings and when people asked me why, I used to answer to them that I am 
using FreeBSD and I need more readings to configure my system but before I 
could finish the last phrase of my sentence, they would say "Oh, your not 
using Windows! so you are using Linux!..." "Why use strange 
things?"...Imagine that Linux sounds strange to them, what would happen if I 
start explaining what FreeBSD is!...Hehehe...And the person in-charge on our 
network does not even know why we have to configure our DNS numbers from our 
ISP in order to connect to the internet...!!! and I only understood what DNS 
is after I started FreeBSD...When I tried to say that you should try FreeBSD 
because I learned it using the said OS...and the answer was "My mind is no 
longer interested in strange OSes...!!!
So I do not want to ask about this thing because I know that they will not and 
can not understand...hehehe
Sorry for this kind of response but I really appreciate the time for your 
responses and I will take on this challenge in another environment in the 
future...
Forgive me for the wasted bandwidth...
> See for example:
>   http://www.onlamp.com/pub/a/onlamp/excerpt/ssh_11/index1.html
>
> In case you have no access to the gateways, I then wonder, if you could
> use any third computer with a real IP address (provided you have access
> to that one) and use this third computer as an inbetween in the ssh-tunnel
> between your two laptops. Above article may give a clue.
>
> Does that help?
Yes it did and I will really keep this Emails for future reference...
Once again, thanks a lot...

Bull TORS
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Need Advice in SSH

2004-05-05 Thread Rob
Bull TORS wrote:


My laptop in the office (laptop1.mydomain.org) has a static internal network 
address 192.168.1.35 from my company's (companydomain.org) LAN Server.
My laptop in my home has 192.168.1.x (I am not that sure if it changes a lot 
but I think not) as a DHCP client from my ISP (ispdomain.ne.jp).
So I think both gets internal network addresses from their respective servers, 
one as a static client and the other as a dynamic client from different 
domains.  Does this mean I can not use ssh from either both PC's?
My knowledge of ssh is just to the level of a regular user, so I may be
wrong here. But in this case I am afraid you can only connect the two
computers if you also have access (login & password) to each one of the
gateways, in which case you can make use of ssh-tunnels.
See for example:
 http://www.onlamp.com/pub/a/onlamp/excerpt/ssh_11/index1.html
In case you have no access to the gateways, I then wonder, if you could
use any third computer with a real IP address (provided you have access
to that one) and use this third computer as an inbetween in the ssh-tunnel
between your two laptops. Above article may give a clue.
Does that help?

Regards,
Rob.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Need Advice in SSH

2004-05-05 Thread Kevin Stevens
On May 5, 2004, at 20:24, Bull TORS wrote:

My laptop in the office (laptop1.mydomain.org) has a static internal 
network
address 192.168.1.35 from my company's (companydomain.org) LAN Server.
My laptop in my home has 192.168.1.x (I am not that sure if it changes 
a lot
but I think not) as a DHCP client from my ISP (ispdomain.ne.jp).
So I think both gets internal network addresses from their respective 
servers,
one as a static client and the other as a dynamic client from different
domains.  Does this mean I can not use ssh from either both PC's?
No, but you need more information.  Some device on each end is 
translating those non-routable private addresses to public ones usable 
on the Internet.  Almost certainly, at least one and probably both are 
blocking inbound SSH connections by default.

It is more likely that you can initiate outbound connections from your 
company's network, and can configure your home network to permit 
inbound connections.

It is much less likely that you will be able to have your company 
network configured to permit inbound connections initiated from your 
home computer.

In either case, you need more detailed information on the 
configurations.  Talk to the IT staff at your company and explain what 
you're trying to do and ask if they permit outbound SSH sessions.  At 
your home, in my experience it's very uncommon for an ISP to provision 
either DHCP or private addresses directly - it's more common for there 
to be a local device in your home that is accomplishing that.  But talk 
to your ISP, it could be different in Japan.

Properly speaking, this has little or nothing to do with FreeBSD, BTW, 
it is general firewall, NAT and SSH information.

KeS

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Need Advice in SSH

2004-05-05 Thread Bull TORS
On Thursday 06 May 2004 11:25, Rob wrote:
> Bull TORS wrote:
> > Can I use ssh to connect/administer either way on these 2 laptops?
> > I hope that I have stated my question clearly...I will try my best to
> > simply things below:
> >
> > laptop1.mydomain.org<-?ssh?---> laptop2.mydomain.org
> > Static IP Address from the  DHCP client of my ISP
> > Company LAN Server with
> > a different domain (companydomain.org)
>
> Are the laptops on internal networks (10.0.0.0/8 for example) or on real
> internet addresses? In the latter case, you just do
>
>   ssh a.b.c.d

My laptop in the office (laptop1.mydomain.org) has a static internal network 
address 192.168.1.35 from my company's (companydomain.org) LAN Server.
My laptop in my home has 192.168.1.x (I am not that sure if it changes a lot 
but I think not) as a DHCP client from my ISP (ispdomain.ne.jp).
So I think both gets internal network addresses from their respective servers, 
one as a static client and the other as a dynamic client from different 
domains.  Does this mean I can not use ssh from either both PC's?

Thank you very much for the reply,

Bull TORS
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Need Advice in SSH

2004-05-05 Thread Rob
Bull TORS wrote:
Can I use ssh to connect/administer either way on these 2 laptops?
I hope that I have stated my question clearly...I will try my best to simply 
things below:

laptop1.mydomain.org<-?ssh?--->   laptop2.mydomain.org
Static IP Address from the  DHCP client of my ISP
Company LAN Server with
a different domain (companydomain.org)
Are the laptops on internal networks (10.0.0.0/8 for example) or on real internet
addresses? In the latter case, you just do
 ssh a.b.c.d

using the IP addresses from one machine to the other, providing the username
is same on both machines. Otherwise use: ssh [EMAIL PROTECTED]
You can also put the a.b.c.d octets together your chosen hostnames in /etc/hosts
and use the hostnames instead.
Does your ISP change your IP regularly, or is it fixed?
If it changes, the ssh only works from laptop2 to laptop1; and for the reverse
you have to play some tricks.
Rob.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Need Advice in SSH

2004-05-05 Thread Bull TORS
Hello,

I was hoping if anyway could give me advice, hints, and anything about this 
question of mine.

I have to laptops in which I have installed FreeBSD-Current (both).  One is in 
the office that I worked for and the other at my home.

I have named (hostname) my laptops as laptop1.mydomain.org and 
laptop2.mydomain.org

laptop1.mydomain.org has a static IP Address from our LAN Server 
(companydomain.org).  laptop2.mydomain.org has DHCP client setttings from my 
ISP(ispdomain.ne.jp).

Can I use ssh to connect/administer either way on these 2 laptops?
I hope that I have stated my question clearly...I will try my best to simply 
things below:

laptop1.mydomain.org<-?ssh?---> laptop2.mydomain.org
Static IP Address from the  DHCP client of my ISP
Company LAN Server with
a different domain (companydomain.org)

I would really appreciate any replies and if possible any tips.

Thank you
Bull TORS
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"