| | |
Tunnel through firewall to DMZ
Thread Solved |
Here is the setup:
I have a Solaris box running the amanda backup server for all of the Solaris and Linux machines. It can backup all of the machines on the private network just fine, but there is one Redhat Linux 7.3 machine that sites outside of the firewall in a DMZ. Punching a hole in the firewall to allow communication is absolutely not an option, so what I need to know is what would be the safest and most reliable way to create a tunnel from the Redhat box in the DMZ to the Solaris box inside? I have thought of using an SSH tunnel, but I don't know how reliable that is, or how to do this properly without creating a backdoor through the firewall. Any help would be greatly appreciated.
I have a Solaris box running the amanda backup server for all of the Solaris and Linux machines. It can backup all of the machines on the private network just fine, but there is one Redhat Linux 7.3 machine that sites outside of the firewall in a DMZ. Punching a hole in the firewall to allow communication is absolutely not an option, so what I need to know is what would be the safest and most reliable way to create a tunnel from the Redhat box in the DMZ to the Solaris box inside? I have thought of using an SSH tunnel, but I don't know how reliable that is, or how to do this properly without creating a backdoor through the firewall. Any help would be greatly appreciated.
PARANOIA:
A healthy understanding of the way the universe works.
A healthy understanding of the way the universe works.
I would give openVPN a try. You can use UDP or TCP/IP ports for the tunnel and you can go cross platform from Solaris to Red Hat easily. I've had nothing but good things happen for my OpenVPN install and use.
http://openvpn.sourceforge.net/
Hope this is what you're looking for...it's a great prog.
http://openvpn.sourceforge.net/
Hope this is what you're looking for...it's a great prog.
My Home Away from Home: Yet Another Linux Blog
Thanks, I appreciate your quick response. I have used OpenVPN before, and yes it is a great solution but I was hoping for a simple solution, not quite so heavy as installing a full vpn solution. I was hoping for just some kind of solution using ppp/ssh, ssh tunneling, or something like that. One, for simplicity, two, I don't need full access to resources between the boxes, just one port (10080/udp), and three, the solaris box has no development tools. I suppose I could make a dirty attempt at cross-compiling for Sparc64 on my linux box, but would rather not try that. It leaves too much room for error. Maybe I'm asking too much from too little.
PARANOIA:
A healthy understanding of the way the universe works.
A healthy understanding of the way the universe works.
This is all it took:
On internal machine:
#ssh -R 39:localhost:23 root@dmzmachine
On dmzmachine:
#telnet localhost 39
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
SunOS 5.7
login:
I used telnet for an example, but now I can forward "anything."
On internal machine:
#ssh -R 39:localhost:23 root@dmzmachine
On dmzmachine:
#telnet localhost 39
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
SunOS 5.7
login:
I used telnet for an example, but now I can forward "anything."
PARANOIA:
A healthy understanding of the way the universe works.
A healthy understanding of the way the universe works.
![]() |
Similar Threads
- playing age of empires 2 with hamachi (Game Development)
- IPSec woes (Networking Hardware Configuration)
- game server with motorola wr850g router (Networking Hardware Configuration)
- downloading / streaming through firewall (OS X)
- newbie: need help setting up my network, router + firewall problems (Networking Hardware Configuration)
Other Threads in the Networking Hardware Configuration Forum
- Previous Thread: Need server for office
- Next Thread: The Broadband Wars: Cable Vs DSL
| Thread Tools | Search this Thread |
Tag cloud for Networking Hardware Configuration
802.11 802.11ac 802.11n bluetooth british broadband browserproblems bt cloud connectionproblem connectivity cpu data data-center desktop dual ethernet firewall gigabit gigabyte green growth hardware hong-kong ibm infrastructure internet memory mobile-apps network networking networks news office program rdimm reliability riched20.dll router routers server setup small storage survey technology telecoms troubleshoot uk upgrade videoconferencing view virgin wifi wireless wirelessnetworking





