Question about a reverse ssh tunnel, kinda

[bobwhoops]

I'm not sure if that's what you'd use for this problem. This is my situation:

My school just implemented some stuff with vlans, firewalls, subnetting, etc. Now, I can't externally ssh to my machine. What I can do, however, is externally ssh to a school server, and internally ssh to it. I can't ssh from the server to my machine though.

So, I need a way to ssh to my machine externally. I don't think a reverse ssh tunnel will work because I can't ssh from the server to my machine. I was thinking of something like sshing to the server from my machine, setting up a screen session, then externally sshing to the machine, connecting to the screen session, and then hijacking the connection, although I don't really know how to do that (though I could probably figure out by reading some man pages)

Will this solution work? Is there something a lot easier that would work?

Thanks

[Raffi]

My school just implemented some stuff with vlans, firewalls, subnetting, etc. Now, I can't externally ssh to my machine. What I can do, however, is externally ssh to a school server, and internally ssh to it. I can't ssh from the server to my machine though.

You lost me here, so let me ask what you can do once you are on the school server.

Can you access any ports on internal machines? Can you access anything on external machines? Do you have control of any internal machines?

[James Wells]

Greetings,

Not sure if it will be valuable to you, but I would suggest looking at corkscrew for ssh. This will allow you to SSH using the web proxy on your network. Is a very power tol for SSH.

[xming]

ssh from internal (school) machine to external (internet) machine with port forward to create a reverse ssh tunel.

from int to ext

Code: Select all

ssh -R 2222:localhost:22 external.machine.com

leave this ssh session running, optonal in a screen session

then from ext

Code: Select all

ssh -p 2222 localhost