Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #5005

Re: incoming ssh blocked by ISP

From Dan Purgert <dan@djph.net>
Newsgroups comp.os.linux.networking
Subject Re: incoming ssh blocked by ISP
Date 2021-11-10 13:13 +0000
Organization A noiseless patient Spider
Message-ID <slrnsonhco.43q.dan@djph.net> (permalink)
References <sm66vk$hvp$1@dont-email.me> <sm6af0$sst$1@dont-email.me> <ep9j5ixftj.ln2@minas-tirith.valinor>

Show all headers | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Carlos E. R. wrote:
> Or reverse ssh. I can not describe, I have not used it. Or a tunnel to
> some server out there.

Reverse-ssh is pretty nice, but would require a couple bucks a month to
say Linode (or Digital Ocean or any of the other VPS providers out
there).

It's been a little while since I've done this, so I might have an error
or two.  Note that this requires sshd to be installed on the machine
behind CGNAT (I think it is, but...)

Hosts:
 - PC-H --> the PC behind the CGNAT ISP
 - VPS --> the intermediary VPS system
 - Laptop --> the device we're carrying around / connecting from outside
   with.

User accounts:
 - dan@pc-h
 - revssh@vps
 - you@laptop
 

1. Setup the tunnel.  
  - As dan@pc-h, connect to the VPS with the command :
    ssh -R 40022:localhost:22 revssh@vps

  - This will open a connection to "revssh@vps".  Leave it open, but
    walk away from "PC-H" now.
  - The port "40022" is arbitrary, it can be anything you like, that is
    above 1024.  
  - The port "22" is the port that sshd is listening to on PC-H

2. Grab the laptop, and login to the VPS as normal (i.e. "ssh
revssh@vps".)
  - Note: any valid account on the VPS will work for this step.

3. Test the tunnel from the VPS.
  - Connect to the tunnel with "ssh -oPort=40022 dan@localhost"
  - Authenticate with the proper ssh credentials (private key and/or
    password, as appropriate) for the account "dan@pc-h"

4. You should now be sitting at your normal "dan@pc-h" prompt.  Use PC-H
as normal, or jump to other hosts on your LAN, as necessary.


HTH :)

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE3asj+xn6fYUcweBnbWVw5UznKGAFAmGLxZYACgkQbWVw5Uzn
KGCV6hAAkax/PjOZol2Gat6KyjN4g+esTsR3n1oND4fHMHC59vSz8oH4/GCtWEim
x5gS1pUzSBSYdT/KoIqw/krIDr/01tjcA6QWToP/nnwFVIjupKsRP5eTEnGdFacr
ksQiLi+JHRRFMWIYYzgNNGIQc4GEgeR6XTXBJHmNIlooKw86tyP7SS/14ZL+P2su
7RagkMvGE6S5ukgiCrjUKJq/O+8WV3Kln3LK9EjhggcPUQCCFCDP+teFWTMbv8tL
miNO2+jpH8wibOotazoKqb3gwtb4ojUniG2KvNgw09Q2/00OeUURbMHpZrDqmhsO
mtUMZV2Fx4p3xm2/PBGI4eVBfV8w1FEcUqJ4zwc2PyD6X6sWk8xUfTV3PmN4w5Rs
3fC91kz0X9G0tTvG3KLOZtiHAQOHbd3aYLeujiY/zSKPeNPhdoEUc11ahnqtOje5
mXfLAetF1TUYTj91X9DTajXC11bDWuKt0avZ3nA2GlAT6laSlvtqJhpXd/2JOkOJ
yE4XVehRSLxP/hK7+rrBImmiNX6lE/K/XCunOf5UuaabctyVwWSmvUVilLus3duN
LykYLg81KF9j8YDOKsPsmDL5j3CAzCFj1bk6+XUL/OYv8pYUYb8tdAh7SzaNiypZ
YrJeZw1OOq6EARLkDU6SJUMKjY2ce0F7bgZKaKcrxt1btSg8HNE=
=Tl56
-----END PGP SIGNATURE-----

-- 
|_|O|_| Github: https://github.com/dpurgert
|_|_|O| PGP: DDAB 23FB 19FA 7D85 1CC1  E067 6D65 70E5 4CE7 2860
|O|O|O| Former PGP: 05CA 9A50 3F2E 1335 4DC5  4AEE 8E11 DDF3 1279 A281

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

incoming ssh blocked by ISP Bob Tennent <rdtennent@tennent.ca> - 2021-11-06 15:28 +0000
  Re: incoming ssh blocked by ISP Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2021-11-06 16:28 +0000
    Re: incoming ssh blocked by ISP Bob Tennent <rdtennent@tennent.ca> - 2021-11-06 21:33 +0000
      Re: incoming ssh blocked by ISP Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2021-11-06 21:54 +0000
        Re: incoming ssh blocked by ISP "Carlos E. R." <robin_listas@es.invalid> - 2021-11-06 23:13 +0100
          Re: incoming ssh blocked by ISP "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2021-11-06 19:16 -0400
            Re: incoming ssh blocked by ISP "Carlos E. R." <robin_listas@es.invalid> - 2021-11-07 00:28 +0100
        Re: incoming ssh blocked by ISP William Unruh <unruh@invalid.ca> - 2021-11-07 03:03 +0000
        Re: incoming ssh blocked by ISP Marco Moock <invalid@invalid.invalid> - 2021-11-07 12:44 +0100
      Re: incoming ssh blocked by ISP "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2021-11-06 17:57 -0400
        Re: incoming ssh blocked by ISP "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2021-11-06 18:01 -0400
          Re: incoming ssh blocked by ISP Bob Tennent <rdtennent@tennent.ca> - 2021-11-07 01:56 +0000
            Re: incoming ssh blocked by ISP Bob Tennent <rdtennent@tennent.ca> - 2021-11-07 21:21 +0000
              Re: incoming ssh blocked by ISP "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2021-11-07 19:05 -0500
                Re: incoming ssh blocked by ISP ant@zimage.comANT (Ant) - 2021-11-07 22:51 -0600
              Re: incoming ssh blocked by ISP Bob Tennent <rdtennent@tennent.ca> - 2021-11-08 01:18 +0000
                Re: incoming ssh blocked by ISP "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2021-11-07 21:25 -0500
                Re: incoming ssh blocked by ISP Bit Twister <BitTwister@mouse-potato.com> - 2021-11-07 23:35 -0600
      Re: incoming ssh blocked by ISP William Unruh <unruh@invalid.ca> - 2021-11-07 02:51 +0000
    Re: incoming ssh blocked by ISP "Carlos E. R." <robin_listas@es.invalid> - 2021-11-06 22:47 +0100
      Re: incoming ssh blocked by ISP Dan Purgert <dan@djph.net> - 2021-11-10 13:13 +0000
  Re: incoming ssh blocked by ISP "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2021-11-06 13:43 -0400
  Re: incoming ssh blocked by ISP Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-11-06 19:18 +0100
  Re: incoming ssh blocked by ISP Marco Moock <invalid@invalid.invalid> - 2021-11-06 19:35 +0100
    Re: incoming ssh blocked by ISP William Unruh <unruh@invalid.ca> - 2021-11-06 19:54 +0000
      Re: incoming ssh blocked by ISP Bob Tennent <rdtennent@tennent.ca> - 2021-11-06 21:18 +0000
        Re: incoming ssh blocked by ISP "Carlos E. R." <robin_listas@es.invalid> - 2021-11-06 22:47 +0100
          Re: incoming ssh blocked by ISP "Carlos E. R." <robin_listas@es.invalid> - 2021-11-06 23:56 +0100
        Re: incoming ssh blocked by ISP Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-11-06 23:44 +0100
          Re: incoming ssh blocked by ISP "Carlos E. R." <robin_listas@es.invalid> - 2021-11-06 23:54 +0100
            Re: incoming ssh blocked by ISP Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-11-07 10:07 +0100
        Re: incoming ssh blocked by ISP Marco Moock <invalid@invalid.invalid> - 2021-11-07 10:22 +0100
          Re: incoming ssh blocked by ISP Pascal Hambourg <pascal@plouf.fr.eu.org> - 2021-11-07 10:51 +0100
            Re: incoming ssh blocked by ISP Marco Moock <invalid@invalid.invalid> - 2021-11-07 11:09 +0100
  Re: incoming ssh blocked by ISP Joe Beanfish <joebeanfish@nospam.duh> - 2021-11-08 14:52 +0000
    Re: incoming ssh blocked by ISP Bob Tennent <rdtennent@tennent.ca> - 2021-11-14 16:42 +0000
      Re: incoming ssh blocked by ISP Marco Moock <mo01@posteo.de> - 2021-11-14 18:01 +0100
      Re: incoming ssh blocked by ISP "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2021-11-14 13:08 -0500
        Re: incoming ssh blocked by ISP Bob Tennent <rdtennent@tennent.ca> - 2021-11-14 19:20 +0000
          Re: incoming ssh blocked by ISP "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2021-11-14 15:06 -0500
            Re: incoming ssh blocked by ISP Bob Tennent <rdtennent@tennent.ca> - 2021-11-14 21:03 +0000
              Re: incoming ssh blocked by ISP "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2021-11-14 16:28 -0500
                Re: incoming ssh blocked by ISP ant@zimage.comANT (Ant) - 2021-11-15 04:19 -0600
                Re: incoming ssh blocked by ISP William Unruh <unruh@invalid.ca> - 2021-11-15 20:18 +0000
      Re: incoming ssh blocked by ISP ant@zimage.comANT (Ant) - 2021-11-15 04:18 -0600

csiph-web