Tunneling query...

griffman · 06-06-2006, 01:15 PM

One of the servers I use regularly has just changed its ssh access policies. I can't ssh in directly any longer; instead, I have to ssh to a second server, then ssh in from there to the original server.

While this works great for editing files in vi, it's not so great for my normal mode of editing files -- i use jEdit or BBEdit's ability to open files via sftp (which uses ssh) directly on my Mac. This way I can edit the files directly on the server, with changes taking place as soon as I save the file. With this change, I can't do this any longer, since the original connection breaks.

I *think* I can fix this by setting up a secure tunnel (or something like that) from my machine through the intermediary to the final destination. Unfortunately, that's literally all I know on the subject. Is this possible?

To try to summarize, I presently connect Mac -> Server via ssh. I want to be able to connect Mac -> (intermediary) -> Server, such that the Mac thinks its transparently talking to Server, not intermediary. Then my direct edits should work.

-rob.

voldenuit · 06-06-2006, 01:37 PM

I'd start by pointing out to the policy-makers that they just broke my workflow, then suggest to use a high port, port-knocking or to set PasswordAuthentication=no instead and use known_hosts.

If they persist, I'd try to get a VPN to the machine you work on instead.

griffman · 06-06-2006, 01:58 PM

Thanks ... I have VPN access, but we're having separate issues with it -- no local network access, even with the option enabled. Trying to debug that one now

-rob.

06-06-2006, 01:15 PM	#1
griffman MVP Join Date: Dec 2001 Location: Portland, OR Posts: 1,472	Tunneling query... One of the servers I use regularly has just changed its ssh access policies. I can't ssh in directly any longer; instead, I have to ssh to a second server, then ssh in from there to the original server. While this works great for editing files in vi, it's not so great for my normal mode of editing files -- i use jEdit or BBEdit's ability to open files via sftp (which uses ssh) directly on my Mac. This way I can edit the files directly on the server, with changes taking place as soon as I save the file. With this change, I can't do this any longer, since the original connection breaks. I think I can fix this by setting up a secure tunnel (or something like that) from my machine through the intermediary to the final destination. Unfortunately, that's literally all I know on the subject. Is this possible? To try to summarize, I presently connect Mac -> Server via ssh. I want to be able to connect Mac -> (intermediary) -> Server, such that the Mac thinks its transparently talking to Server, not intermediary. Then my direct edits should work. -rob.

06-06-2006, 01:37 PM	#2
voldenuit League Commissioner Join Date: Sep 2003 Location: Old Europe Posts: 5,146	I'd start by pointing out to the policy-makers that they just broke my workflow, then suggest to use a high port, port-knocking or to set PasswordAuthentication=no instead and use known_hosts. If they persist, I'd try to get a VPN to the machine you work on instead.

06-06-2006, 01:58 PM	#3
griffman MVP Join Date: Dec 2001 Location: Portland, OR Posts: 1,472	Thanks ... I have VPN access, but we're having separate issues with it -- no local network access, even with the option enabled. Trying to debug that one now -rob.