<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:s="http://www.techrepublic.com/search" xmlns:dc="http://purl.org/dc/elements/1.1/"  xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
    <title><![CDATA[Discussion on Setting up a reverse SSH tunnel ]]></title>
    <link><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661]]></link>
    <atom:link rel="hub" type="application/rss+xml" href="http://pubsubhubbub.appspot.com/" />
    <atom:link rel="self" type="application/rss+xml" href="http://www.techrepublic.com/forum/discussions/85-177661/rss" />

    <description><![CDATA[]]></description>
    <language>en-us</language>
    <lastBuildDate>2013-05-22T19:25:06-07:00</lastBuildDate>
             

    <item>
        <title><![CDATA[RE: Setting up a reverse SSH tunnel]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-3362212]]></link>
        <description><![CDATA[In this simple case you should provide local.mydomain.com which would be already resolved in normal &quot;white&quot; IP address to allow connect to. What if you are behind NAT? Is there way to setup backward tunnel exactly to machine from what connect initiated?]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-3362212]]></guid>
        <dc:creator><![CDATA[Hubbitus]]></dc:creator>
        <pubDate>Thu, 23 Sep 2010 04:29:45 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[RE: Setting up a reverse SSH tunnel]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-2665166]]></link>
        <description><![CDATA[At least the version of ssh I have, the one that comes with Debian Etch, likes this  better:ssh -n -N- T -t -t -R 1100:local.mydomain.com:1100 Not sure why.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-2665166]]></guid>
        <dc:creator><![CDATA[mgrollman@...]]></dc:creator>
        <pubDate>Sat, 20 Dec 2008 13:48:27 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Remote Syslog]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-1808007]]></link>
        <description><![CDATA[An obvious benefit of this is remote Syslog.  Remember that the article describes this as a way of opening a port through a NAT (firewall) when the traffic will primarily be inbound, in the direction normally stopped by the firewall.Remote Syslog is a superb security strategy.  It can be quite a &quot;gotcha&quot; when a hacker discovers an SSH tunnel forwarding the information that normally would have been erased by a rootkit.  I suppose you could also remote a spooler queue.Obviously, if the need were more common, more people would think to use this feature.  But it is a 'paradigm' problem, people don't use what they don't know exists.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-1808007]]></guid>
        <dc:creator><![CDATA[mgordon@...]]></dc:creator>
        <pubDate>Tue, 12 Jul 2005 15:01:35 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Thin Clients]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-1808003]]></link>
        <description><![CDATA[This is great for thin clients.  I can push the server display back to the thin client and the connection is encrypted!]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-1808003]]></guid>
        <dc:creator><![CDATA[jmgarvin]]></dc:creator>
        <pubDate>Tue, 12 Jul 2005 14:39:48 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[For X programs, etc.]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-1807890]]></link>
        <description><![CDATA[If you SSH to a remote server, then export your display back to your local machine and fire up a GUI program on the remote system, the info from the remote system is not encrypted coming to your local box. If you set up the reverse connection on the port your app uses, it will be encrypted (if I understand the process correctly).]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-1807890]]></guid>
        <dc:creator><![CDATA[AlanGeek]]></dc:creator>
        <pubDate>Tue, 12 Jul 2005 12:19:39 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[interesting...]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-1807504]]></link>
        <description><![CDATA[seems like if you haven't secured ssh properly, someone could run a root kit on thier local machine, through a ssh tunnel with logins being sent to local machine.I can see where monitoring a &quot;remote&quot; system could be needed occasionally ( monitoring employee activity ) but why would you want to monitor for port activity like this?]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/85-177661-1807504]]></guid>
        <dc:creator><![CDATA[Jaqui]]></dc:creator>
        <pubDate>Tue, 12 Jul 2005 03:38:21 -0700</pubDate>
    </item>
    </channel>
</rss>

