SSH-tunnels are very useful to access server or PCs behind firewall. Normally these components are behind NAT and have only a LAN-IP. To access them you will need to create a DNAT rule but this possibility is not secure like SSH protocol.
To create a ssh tunnel you need only a running ssh-server on the firewall of your destination site.
Create ssh tunnel to access the RDP Port on LAN-PC 192.168.1.10
From laptop(172.16.100.56) issue this command to create a ssh tunnel to your home PC:
ssh -N -L 4652:192.168.1.10:3389 firstname.lastname@example.org
After you type in your password you will be able to connect to RDP: localhost:4652
OR this method:
ssh -N -L 172.16.100.56:80:192.168.1.10:80 email@example.com
After you type in your password you will be able to connect to HTTP: http://172.16.100.56/
Create a reverse ssh tunnel from laptop(172.16.100.56) to your home firewall. This will allow you, to access the ssh port of your laptop from your firewall.
ssh -NXC -R 42005:localhost:22 firstname.lastname@example.org
From the firewall at home you will be able to access your laptop ssh port:
ssh -p 42005 username@localhost
Extended example two:
This is only a extended example two, with this reverse tunnel you will be able to access your laptop ssh port from everywhere.
ssh -NXC -R 220.127.116.11:42005:localhost:22 email@example.com
Access the port 22 on your laptop at work:
ssh -p 42005 firstname.lastname@example.org
Enable GatewayPorts yes in yoursshd_config to use ssh tunneling.
– you don’t need a VPN between two LANS
– unsecure protocols can be simple run over secure shell
– firewall worm