reverse SSH / SSH over NAT traversal

Hi all,

I'm trying to connect to a remote host to do some simple support. The remote host is behind a NAT/firewall and it's not possible to ask the admin to tunnel a port. The remote host has a live person working on it (a linux newbie).
The question is, can the remote user type in some command in their terminal to connect (SSH?) to my network - and thereby allow me to get a terminal on the remote machine. I think this is possible with a reverse SSH tunnel - but I don't really want to allow the remote user any access to my system. It's probably possible to set up some chroot or otherwise locked out environment (/bin/nologin ?), but I want to first check if there are any simpler options.

A better question: is it possible to establish an SSH connection if both networks have NAT/firewalls that can't be easily controlled? I know some programs (e.g. skype) are able to traverse NATs by various means (UDP). Can some tunnel of this sort be established so that an SSH connection can be established on top of that?


Thanks!




--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

Relevant Pages

  • Re: Perl, SSH and the s bit problem
    ... >when it wants to start the ssh connection to the remote host, ... > The authenticity of host '217.21.xxx.xxx' can't be established. ... >becoming user 'pro'. ...
    (comp.unix.bsd.freebsd.misc)
  • Re: Remote GUI Login between Solaris machines?
    ... How can you get the ssh connection (thru ... He may have tried to explain that enabling X11 forwarding allows remote ... "ForwardX11 no" because you should not trust every remote host. ...
    (comp.unix.solaris)
  • Re: rdist over ssh on Solaris
    ... kona_iron@yahoo.fr writes: ... >I'm already using ssh to access the remote host. ... >What have I to configure to use rdist over an ssh connection? ... You will need to install a different "rdist". ...
    (comp.security.ssh)
  • Re: uucp over ssh
    ... >it looks like the tunnel is established. ... >remote host is really secured. ... Both will create the listening socket on the local host at port 5400. ... network interfaces, and the security is based on that only people who ...
    (comp.security.ssh)