up vote 2 down vote favorite
1
share [g+] share [fb]

Let's say I have a Linux workstation at work, behind a firewall. So even though I may have a remote access server set up on it (such as the most excellent NoMachine NX Server), I can't access it from home.

My home network happens to have a Linux server. Is it possible to ssh from work to the home Linux machine and set up a tunnel so that once I'm at home, I can run the NX client, point it to my home Linux box on some port like 9000, and have that forward through the tunnel to port 22 on my work Linux box? How would I set this up?

link|improve this question
77% accept rate
Your company doesn't provide some kind of vpn access? – Keith Apr 22 '11 at 17:19
feedback

2 Answers

up vote 2 down vote accepted

From the machine at work, create a tunnel to your machine running ssh at home:

randolf@workserver:~$ ssh -vvv randolf@myhomeserver -R 44455:localhost:22

This will forward the remote port 44455 from your home server to port 22 (or whichever port ssh is listening on) on your work machine.

From home, check to see if anything is listening on 44455 

randolf@homeserver:~$ netstat -an | grep 44455
tcp        0      0 127.0.0.1:44455         0.0.0.0:*               LISTEN

Next, to connect from home to your work machine, from your home server:

randolf@homeserver:~$ ssh localhost -p 44455
Password: ******

From there you should be connected to your work machine via your tunnel.

link|improve this answer
Perfect, exactly what I was looking for. Then I can use NX to log in remotely. – CaptSaltyJack May 27 '11 at 22:11
Awesome, glad to have helped! – CJ Travis May 30 '11 at 13:06
feedback
up vote 1 down vote

You could set some port forwarding up with your firewall, or possibly even use a tool like "bounce" to re-direct ports if there are some restrictions on what you're allowed to do with your firewall, but here's what I'd do if I were you:

Install the excellent free, open source, userland OpenVPN software. Set up the target server as an OpenVPN client (and configure infinite connection retries), and your home Linux server as the OpenVPN server. This way, the target server running the OpenVPN client will be connected to your home Linux server whenever it's operational and connected to the internet -- through this VPN connection, you can have full access to your work/target server (running the OpenVPN client).

  OpenVPN (full-featured free, open source, userland VPN solution)
  http://www.openvpn.net/index.php/open-source.html

link|improve this answer
So just to make sure I have this right: my home Linux box runs an OpenVPN server, and my Linux box at work runs an OpenVPN client that stays connected to my Linux home VPN? And that will allow me (at home) to remote into my work Linux box? – CaptSaltyJack Apr 22 '11 at 17:13
@CaptSaltyJack: Yes. The purpose of an VPN is to extend the network to another computer or another network of more computers, and communications can go both ways. You can set either one up as the VPN server (and it probably would be more useful to set your work one up as the server, but the way you asked your question prompted me to suggest otherwise -- it really doesn't matter which way you do it though). The OpenVPN server's private IP will be 10.8.0.1 (default), and the first OpenVPN client will be 10.8.0.6 (default) -- they'll be able to ping/connect-to each other. – Randolf Richardson Apr 22 '11 at 17:16
@CaptSaltyJack: The server that has a static IP address should really also be the OpenVPN server though (unless it has a hostname that changes automatically with the IP). – Randolf Richardson Apr 22 '11 at 17:17
Well, at work, the network is set up in a way that all the computers are firewalled and to the external world they have one IP. So I don't think I could run a VPN server on my work machine and connect to it. I'd probably have to have it connect to my home machine. – CaptSaltyJack Apr 22 '11 at 17:40
@CaptSaltyJack: Just as I suspected. Either way you set it up (whichever side is the OpenVPN server), your applications (including ssh) won't know the difference. – Randolf Richardson Apr 22 '11 at 18:06
show 2 more comments
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.