PDA

View Full Version : SSH tunnel to get around firewall

Yechidah
04-05-2005, 14:54
Does anyone know why using an SSH tunnel on a windows box to connect a linux TS server wouldn't work.
I can get an SSH tunnel to SSH to work fine (I can connect localhost:1111 and it gets rerouted to the linux box 22) so I'm pretty sure the way I'm setting up the tunnel is working fine. But when I change it to tunnel to port 8767 instead of 22 and then try and connect TS to localhost:1111 it says no TS server. Has anyone tried doing this before?
Thanks
guldi
04-05-2005, 17:24
You want to tunnel UDP packets through a "slow" TCP tunnel,... I'm not even sure if there is a way tech. to tunnel UDP through a ssh tunnel. :confused: Weould'be interested in a solution as well
Kess
06-05-2005, 17:22
guldi you're right !!!

You can tunnel TCP packets on a TCP tunnel, but you can't tunnel UDP packets on a TCP tunnel.

TS Works on UDP protocol so...
Naked Ape
07-05-2005, 10:46
You can tunnel TCP packets on a TCP tunnel, but you can't tunnel UDP packets on a TCP tunnel.

Of course you can... Yechida, check out http://www1.cs.columbia.edu/~lennox/udptunnel/ for a UDP-over-TCP tunnel application.
guldi
09-05-2005, 12:44
interesting, however I wouldn't expect a fast connection by such a setup ?
Naked Ape
09-05-2005, 14:45
interesting, however I wouldn't expect a fast connection by such a setup ?

I haven't tested it myself so I can't say for sure but I'd expect about the same bandwidth that you'd normally get from TCP (somewhere around 75% of the raw bandwidth) unless your machines are extremely "performance challenged"... ;)
guldi
09-05-2005, 15:13
sry, meant the delay: tunnel a conectionless protocoll through a connection oriented protocoll (is that the right wording ??) sounds like high / higher delay to me ?
Naked Ape
09-05-2005, 16:40
sry, meant the delay: tunnel a conectionless protocoll through a connection oriented protocoll (is that the right wording ??) sounds like high / higher delay to me ?

Well, the connection isn't re-established per packet but rather set up once and then the UDP packets are streamed over the connection. Of course there will be some overhead but it is probably pretty insignificant.
gmillerd
25-05-2005, 16:23
Because of the reliance on just udp, I need to use a vpn to use TS (unless I run a server). I PPTP to work, then out of work access TS and it works fine. Default GW through PPTP however.

I have setup a icecast stream for my TS server so that people dont need to mess with the client (unless they want to) for WoW raids. That might be something for your people to look into.

Much easier to get people to use winamp/itunes/xmms that TS.