Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to set up a SSH tunnel through to my university account (unix shell) from home using Putty and this guide but when I try to access any site, Firefox yelps.

The connection to the server was reset while the page was loading.

The university server is running SunOS 5.10 if it's any help.

Putty's log is saying

Forwarded connection refused by server: Administratively prohibited [open failed]

Is there any command I can run on the shell to open the port?


share|improve this question

Looks like SSH server config is forbidding this (there are options about which forwarded connections to allow and which not). As stated in the sshd_config manpage ("Note that disabling TCP does not improve security unless users are also denied shell access"), you can probably workaround starting some custom program (for example, SOCKS5 server and socat; or slirp) to use "shell" access to do the networking.

share|improve this answer

In addition to Vi.'s answer, this might also be related to the DNS timing out (or maybe not being configured correctly in the first place): Forwarded connection refused by server: Administratively prohibited [open failed].

In such case, you might be able to get around these DNS issues by something like network.proxy.socks_remote_dns;false.

Otherwise, as Vi. points out, indeed, sshd_config(5) has the following wording in regards to a possible blocking of TCP:

         Specifies whether TCP forwarding is permitted.  The available
         options are ``yes'' or ``all'' to allow TCP forwarding, ``no'' to
         prevent all TCP forwarding, ``local'' to allow local (from the
         perspective of ssh(1)) forwarding only or ``remote'' to allow
         remote forwarding only.  The default is ``yes''.  Note that
         disabling TCP forwarding does not improve security unless users
         are also denied shell access, as they can always install their
         own forwarders.

Ports above 1024 generally don't require root privileges on most systems -- so, potentially, you might be able to run your own sshd or proxy on an upper-level port (you could even ssh back to your home machine, and do a secure forwarding of a single port that way).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.