Subject: Re: ssh - are you nuts?!?
To: None <opentrax@email.com>
From: Jason R Thorpe <thorpej@zembu.com>
List: tech-security
Date: 12/17/2000 22:57:24
On Sun, Dec 17, 2000 at 07:29:24PM -0800, opentrax@email.com wrote:

 > > TCP tunnelling.
 > > 
 > How is TCP tunneling useful?

"TCP tunneling" is really not the correct term.  It's actually
called "port forwarding", and could be used like this:

	Assume that int.foo.com is the internal web server at
	Foo, Inc.  It's behind a firewall and is not accessible
	from outside the company's internal network.

	Foo, Inc. also provides a gateway for users on the road
	(conferences, sales calls, etc.) to log into their systems
	back at the office.  Calls this ssh-gate.foo.com.

	A user on the road can use SSH's port forwarding feature
	to access the internal web server via the SSH gateway like
	so:

		laptop% ssh -L8080:int.foo.com:80 ssh-gate.foo.com

	Now on the user's laptop, he can point his web browser to
	http://localhost:8080/ and get the company's internal
	web server.

Needless to say, this is a Very useful feature.

-- 
        -- Jason R. Thorpe <thorpej@zembu.com>