Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #1437

Re: SSH connection through a router applying NAT

Date 2012-05-31 12:58 +0200
From David Brown <david@westcontrol.removethisbit.com>
Newsgroups comp.os.linux.networking
Subject Re: SSH connection through a router applying NAT
References <4fc67f2d$0$6640$9b4e6d93@newsspool2.arcor-online.net> <jq67u6$og8$1@usenet01.boi.hp.com> <4fc74b98$0$6567$9b4e6d93@newsspool4.arcor-online.net>
Message-ID <RtWdnfa2aorj0lrSnZ2dnUVZ8u6dnZ2d@lyse.net> (permalink)

Show all headers | View raw


On 31/05/2012 12:44, Marco wrote:
> On 2012-05-30 Rick Jones<rick.jones2@hp.com>  wrote:
>
>> Not that I seek to pour cold water on your plans, but when you say
>> "Everybody in this building" do you mean a business?  If so, you might
>> want to make sure you aren't about to violate a company policy or
>> three...
>
> No, it's a private flat. In my former flat I connected via the
> telephone line. Here the telephone lines are dead, but Ethernet
> sockets are provided. I guess all the cables gather in the basement
> in a switch (since I see dozens of other computers and my
> neighbours' communication with wireshark) and then go through a NAT
> router to the ISP.
>

Viewing your neighbours' communications with wireshark is likely to be 
violating the building's policy, if they have written a decent one.  It 
is also possibly a criminal offence in some countries.

Of course, the people responsible for the network in the building have 
done a poor job if you can view other people's traffic like this.  It's 
the sort of incompetent networking administration that gives us the 
botnets we know and love.

> I don't think I violate any policy when I just try to SSH to my
> computer.
>

Trying to figure a way to punch holes in the router and firewall is 
almost certainly against policy, and quite possibly illegal (despite the 
incompetence of the network administrators).  It is also hard and 
unreliable.

Far and away the easiest, safest, and most legal way is to have a 
third-party machine outside the network, which is accessible from 
anywhere.  Your home machine connects to it, your outside client 
connects to it, and the third-party machine connects the two in some way 
(vpn, tunnel, ssh proxy, etc.).

I believe there are some websites designed for this sort of thing, 
though I haven't tried them.  There certainly are for remote desktop 
viewing (mostly targeting windows systems).  Remote hosting or cloud 
servers would work fine, if you can find something cheap enough for your 
budget - it would take absolutely minimal resources.  Or perhaps you 
have friends or relatives with an ADSL line or other always-on, global 
IP network connection, and can leave a little connector box there?  The 
connector box can be as small as a simple wireless router box 
re-programmed with OpenWRT, DD-Wrt, m0n0wall, etc.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

SSH connection through a router applying NAT Marco <netuse@lavabit.com> - 2012-05-30 22:12 +0200
  Re: SSH connection through a router applying NAT Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-30 22:57 +0200
    Re: SSH connection through a router applying NAT Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-30 22:58 +0200
      Re: SSH connection through a router applying NAT Marco <netuse@lavabit.com> - 2012-05-30 23:12 +0200
        Re: SSH connection through a router applying NAT Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-31 00:10 +0200
          Re: SSH connection through a router applying NAT Marco <netuse@lavabit.com> - 2012-06-01 00:00 +0200
            Re: SSH connection through a router applying NAT Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-06-09 13:04 +0200
  Re: SSH connection through a router applying NAT Rick Jones <rick.jones2@hp.com> - 2012-05-30 22:45 +0000
    Re: SSH connection through a router applying NAT Marco <netuse@lavabit.com> - 2012-05-31 12:44 +0200
      Re: SSH connection through a router applying NAT David Brown <david@westcontrol.removethisbit.com> - 2012-05-31 12:58 +0200
        Re: SSH connection through a router applying NAT Marco <netuse@lavabit.com> - 2012-05-31 13:31 +0200
          Re: SSH connection through a router applying NAT J G Miller <miller@yoyo.ORG> - 2012-05-31 12:55 +0000
          Re: SSH connection through a router applying NAT David Brown <david.brown@removethis.hesbynett.no> - 2012-05-31 15:01 +0200
            Re: SSH connection through a router applying NAT Richard Kettlewell <rjk@greenend.org.uk> - 2012-05-31 14:36 +0100
        Re: SSH connection through a router applying NAT Whiskers <catwheezel@operamail.com> - 2012-05-31 13:45 +0000
          Re: SSH connection through a router applying NAT Marco <netuse@lavabit.com> - 2012-05-31 17:38 +0200
            Re: SSH connection through a router applying NAT Whiskers <catwheezel@operamail.com> - 2012-05-31 18:30 +0000
              Re: SSH connection through a router applying NAT J G Miller <miller@yoyo.ORG> - 2012-05-31 20:07 +0000
      Re: SSH connection through a router applying NAT J G Miller <miller@yoyo.ORG> - 2012-05-31 12:53 +0000
  Re: SSH connection through a router applying NAT Ralph Spitzner <rasp@spitzner.org> - 2012-05-31 09:56 +0200
    Re: SSH connection through a router applying NAT Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-06-09 13:06 +0200
  Re: SSH connection through a router applying NAT Chris Davies <chris-usenet@roaima.co.uk> - 2012-05-31 09:04 +0100
  Re: SSH connection through a router applying NAT ein <ein@no.spam> - 2012-06-02 11:40 +0200
  Re: SSH connection through a router applying NAT "Ralph" <ralphzodapn@ymeal.com> - 2012-06-05 11:30 +0000

csiph-web