-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
If you have problem bypassing X-11 session on your FW this woulb be a
nice option, but take in consideration, that some comercial firewalls
like checkpoint ( I don't know if it happens the same with ..e.g.
netfilter) does not apply state-inspection to X-11 connections and need
to setup a bidirectional rule, from server a to pc C ando from pc C to
server A, like a packet filter.
It is not the principal topic but it might save someone a bit of time.
Thiago LPS wrote:
Ok
now you have to do it
log into your firewall with ssh -X firewall ( the -X is to do a
X-forwarding)
after this... do it:
ssh -X solaris
so.. every GUI that you execute in solaris will be forwarded to
firewall, but the there is one more X-forward on firewall that will
redirect the X-session to your box
this worked with me... :)
remember to set up X-forwarding enable on sshd_config
On 11/14/06, Karun <karunanidhis@yahoo.com> wrote:
Hi Guys !
I have the following problem. I need to know if ssh port forwarding
can be
done for this.
I have Server A (Solaris)which needs to run a grpahics program.
Server A resides behind a Firewall.
Server B (Solaris) has access to Server A through ssh. There is a
Firewall
Rule that was implemented to allow ssh traffic from Server B to Server A.
Both Server A and Server B do not have Graphics monitor attached to it.
I have PC C in which I'm running cygwin (X server). I would like to
display
the grpahics program that is invoked on Server A on my PC C. My PC can
ssh
(using putty) to Server B as they are in the same network.
Obviously, when I export the display on Server A to my PCs IP address,
I'm
getting "Can't open Display" because Server A cannot talk to my PC
directly.
Thanks very much for your input.
--
View this message in context:
http://www.nabble.com/SSH-Port-Forwarding-and-X11-Question-%21-tf2632425.html#a7347094
Sent from the SSH (Secure Shell) mailing list archive at Nabble.com.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFYrG4jKoWsBzmW8oRAi9OAKDa0wwvvizdo5DQxVmChrYCaYVeVwCgrF0L
B+kPRedJXCQ8tAzw4RMasbg=
=a1bB
-----END PGP SIGNATURE-----
