ssh port forwarding with suse 9.0 firewall enabled

From: fire on water (invalid_at_spam.xxx)
Date: 02/19/04 

Date: Thu, 19 Feb 2004 14:53:22 +0000

Hi all.

I just installed SuSE 9.0 and trying to configure it the way I had 8.2
configured.

I basically retrieve and send email by tunneling through ssh like so:
ssh -l myusername -L5110:my.remore.server:110 -L5025:my.remote.server:25
my.remote.server

This as you can guess opens local ports 5110 which it tunnels to port
110 on the remote machine and local 5025 which it tunnels to 25 on the
machine.

If I turn on the default firewall config via Yast2 the connections take
very long to get establised. (3-4 minutes before I see the POP3 server
prompt)

If I turn it off then the connections are instant.

This didn't use to happen on 8.2

Does anyone know what the problem might be?

For the firewall config I specify ppp0 as the external interface since
I'm on ADSL and I say that I don't want protection from the internal
network.

any help much appreciated...

Relevant Pages

  • Re: pass a password to ssh
    ... One reason not to use Net::SSH is that IIUC it doesn't use the config ... file of ssh, which can be used to define hosts, tunnels, proxies, ...
    (comp.lang.ruby)
  • Re: Need Help on setting up a small home site.
    ... > told me that I have to open that port and forward request to my ... computer is the first network device. ... connections to port 80, so that they can be routed through to something ... > So if U don't consider it rude to post a long config file here, ...
    (comp.infosystems.www.servers.unix)
  • re: rblsmtpd/qmail-smtpd hung processes
    ... After a while the server just quits accepting smtp connections, or will connect/disconnect very quickly. ... I only had about 3 weeks notice on this and I've been configuring a pair of FreeBSD machines to take over DNS and E-Mail for about a dozen sites. ... Basically I've been on a crash course of learning as I go. ... The file "toaster.conf" file needs to be 644 so that when rotating logs, the programs can re-read the config. ...
    (freebsd-questions)
  • Re: port forwarding and ipfw rules
    ... redirect any connections to .19.110:443 to .19.109:443 ... redirect_port tcp .19.109:443 .19.110:443 ... Also my g/w is currently 5.2.1 but the config should be same ... fxp0: flags=8943mtu 1500 ...
    (freebsd-net)
  • deserialize to C# class from external config file?
    ... from an externally specified config file and deserialize ... the <connections> element seen below. ... still I can't get the deserialize to succeed. ...
    (microsoft.public.dotnet.languages.csharp)