Hello,

I'm trying to figure out if ssh can help me with tunneling http over my
firewall.  I have a dmz-style firewall with a web server behind it.  Can
an outside individual gain access to that web server over ssh?  Here's a
diagram of the machines a,b,c, and d.


outside        outside         inside         web
machine <----> firewall <----> firewall <---> server
a              b               c              d

Now, a user on the outside machine (a) can use ssh to gain access directly to
the web server (d) like this:

# ssh b ssh c ssh d

that works great for a shell session.

Now how can I run a web connection over this?  ssh has the ability to
forward local ports to remote ports, but I can't figure out if that
works over multiple ssh connections like I have.  I want to do something
like (from machine a):

# ssh -L 1234:d:80 ssh b ssh c

So that traffic from local port 1234 ends up on port 80 of the web
server.

However, I haven't had much luck getting that to work.  I suspect I
don't fully understand the port forwarding in ssh.

Any ideas?  Is this possible?

I'm running OpenSSH 1.2.24 on RedHat 6.0.

P.

Reply via email to