<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: ssh hack: connect directly to machine via a firewall box</title>
	<atom:link href="http://www.metabrew.com/article/ssh-hack-connect-directly-to-machine-via-a-firewall-box/feed" rel="self" type="application/rss+xml" />
	<link>http://www.metabrew.com/article/ssh-hack-connect-directly-to-machine-via-a-firewall-box/</link>
	<description>Erlang, PHP, C, C++, Java, PostgreSQL, MySQL, Hadoop, Linux, awk, bash, sed, grep, screen, vim, irc, ssh etc...</description>
	<lastBuildDate>Wed, 08 Sep 2010 09:00:01 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
	<item>
		<title>By: Georges Dupéron</title>
		<link>http://www.metabrew.com/article/ssh-hack-connect-directly-to-machine-via-a-firewall-box//comment-page-1#comment-17545</link>
		<dc:creator>Georges Dupéron</dc:creator>
		<pubDate>Wed, 26 May 2010 13:45:06 +0000</pubDate>
		<guid isPermaLink="false">http://www.metabrew.com/?p=196#comment-17545</guid>
		<description>You should use &quot;$@&quot; instead of $*

Say you use :
sssh &quot;param one with spaces&quot; p2

$* will yield ssh -openblabla &quot;param&quot; &quot;one&quot; &quot;with&quot; &quot;spaces&quot; &quot;p2&quot;
&quot;$@&quot; will yield ssh -openblabla &quot;param one with spaces&quot; &quot;p2&quot;</description>
		<content:encoded><![CDATA[<p>You should use &#8220;$@&#8221; instead of $*</p>
<p>Say you use :<br />
sssh &#8220;param one with spaces&#8221; p2</p>
<p>$* will yield ssh -openblabla &#8220;param&#8221; &#8220;one&#8221; &#8220;with&#8221; &#8220;spaces&#8221; &#8220;p2&#8243;<br />
&#8220;$@&#8221; will yield ssh -openblabla &#8220;param one with spaces&#8221; &#8220;p2&#8243;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Google Reader Shared Items &#8211; September 19, 2009</title>
		<link>http://www.metabrew.com/article/ssh-hack-connect-directly-to-machine-via-a-firewall-box//comment-page-1#comment-9822</link>
		<dc:creator>Google Reader Shared Items &#8211; September 19, 2009</dc:creator>
		<pubDate>Sat, 19 Sep 2009 13:06:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.metabrew.com/?p=196#comment-9822</guid>
		<description>[...] ssh hack: connect directly to machine via a firewall box [...]</description>
		<content:encoded><![CDATA[<p>[...] ssh hack: connect directly to machine via a firewall box [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: RJ</title>
		<link>http://www.metabrew.com/article/ssh-hack-connect-directly-to-machine-via-a-firewall-box//comment-page-1#comment-1730</link>
		<dc:creator>RJ</dc:creator>
		<pubDate>Mon, 23 Mar 2009 20:04:20 +0000</pubDate>
		<guid isPermaLink="false">http://www.metabrew.com/?p=196#comment-1730</guid>
		<description>Another useful trick is &quot;ssh -tt&quot; which forces tty allocation, so instead of the above you can do the following:
ssh -tt firewall.example.com ssh -tt my-vm

this opens an ssh terminal to the remote machine. You can also pass commands, so to reattach to a remote screen session you can do:

ssh -tt firewall.example.com ssh -tt my-vm screen -x</description>
		<content:encoded><![CDATA[<p>Another useful trick is &#8220;ssh -tt&#8221; which forces tty allocation, so instead of the above you can do the following:<br />
ssh -tt firewall.example.com ssh -tt my-vm</p>
<p>this opens an ssh terminal to the remote machine. You can also pass commands, so to reattach to a remote screen session you can do:</p>
<p>ssh -tt firewall.example.com ssh -tt my-vm screen -x</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Chris Jones</title>
		<link>http://www.metabrew.com/article/ssh-hack-connect-directly-to-machine-via-a-firewall-box//comment-page-1#comment-1449</link>
		<dc:creator>Chris Jones</dc:creator>
		<pubDate>Fri, 13 Mar 2009 03:18:40 +0000</pubDate>
		<guid isPermaLink="false">http://www.metabrew.com/?p=196#comment-1449</guid>
		<description>(by which I mean, it&#039;s kinda cute to have that option in your config file - I appreciate it&#039;s functionally the same as what you have)</description>
		<content:encoded><![CDATA[<p>(by which I mean, it&#8217;s kinda cute to have that option in your config file &#8211; I appreciate it&#8217;s functionally the same as what you have)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Chris Jones</title>
		<link>http://www.metabrew.com/article/ssh-hack-connect-directly-to-machine-via-a-firewall-box//comment-page-1#comment-1448</link>
		<dc:creator>Chris Jones</dc:creator>
		<pubDate>Fri, 13 Mar 2009 03:11:13 +0000</pubDate>
		<guid isPermaLink="false">http://www.metabrew.com/?p=196#comment-1448</guid>
		<description>See also the ProxyCommand ssh config option. Saves the need for the script and the little mental step of deciding to use a different ssh/scp/sftp call :)

$ cat ~/.ssh/config
Host gateway.company.com
  ProxyCommand none
Host *.company.com my-private-host
  ProxyCommand ssh myuser@gateway.company.com nc -q0 %h %p
$</description>
		<content:encoded><![CDATA[<p>See also the ProxyCommand ssh config option. Saves the need for the script and the little mental step of deciding to use a different ssh/scp/sftp call :)</p>
<p>$ cat ~/.ssh/config<br />
Host gateway.company.com<br />
  ProxyCommand none<br />
Host *.company.com my-private-host<br />
  ProxyCommand ssh <a href="mailto:myuser@gateway.company.com">myuser@gateway.company.com</a> nc -q0 %h %p<br />
$</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: john.jones.name</title>
		<link>http://www.metabrew.com/article/ssh-hack-connect-directly-to-machine-via-a-firewall-box//comment-page-1#comment-1047</link>
		<dc:creator>john.jones.name</dc:creator>
		<pubDate>Sat, 21 Feb 2009 18:29:07 +0000</pubDate>
		<guid isPermaLink="false">http://www.metabrew.com/?p=196#comment-1047</guid>
		<description>Nice will be tring this out as well ! 
thanks for the tip 

John</description>
		<content:encoded><![CDATA[<p>Nice will be tring this out as well !<br />
thanks for the tip </p>
<p>John</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Steven Roussey</title>
		<link>http://www.metabrew.com/article/ssh-hack-connect-directly-to-machine-via-a-firewall-box//comment-page-1#comment-558</link>
		<dc:creator>Steven Roussey</dc:creator>
		<pubDate>Thu, 29 Jan 2009 20:05:22 +0000</pubDate>
		<guid isPermaLink="false">http://www.metabrew.com/?p=196#comment-558</guid>
		<description>The only times I don&#039;t have a VPN is on a Windows machine. I wish putty did this...</description>
		<content:encoded><![CDATA[<p>The only times I don&#8217;t have a VPN is on a Windows machine. I wish putty did this&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: RJ</title>
		<link>http://www.metabrew.com/article/ssh-hack-connect-directly-to-machine-via-a-firewall-box//comment-page-1#comment-93</link>
		<dc:creator>RJ</dc:creator>
		<pubDate>Tue, 18 Nov 2008 21:25:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.metabrew.com/?p=196#comment-93</guid>
		<description>Torsten, thanks, that is indeed simpler if you just need a shell. 
The -oproxycommand method will transparently deal with port forwards etc for you tho, which is nice. I can still pass any of the -X, -L, -R options and it just works.

scp will work in the same way, so you can create another file &quot;/usr/bin/sscp&quot; and be able to copy files from remote hosts direct to your desktop via a firewall machine.</description>
		<content:encoded><![CDATA[<p>Torsten, thanks, that is indeed simpler if you just need a shell.<br />
The -oproxycommand method will transparently deal with port forwards etc for you tho, which is nice. I can still pass any of the -X, -L, -R options and it just works.</p>
<p>scp will work in the same way, so you can create another file &#8220;/usr/bin/sscp&#8221; and be able to copy files from remote hosts direct to your desktop via a firewall machine.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Torsten Curdt</title>
		<link>http://www.metabrew.com/article/ssh-hack-connect-directly-to-machine-via-a-firewall-box//comment-page-1#comment-84</link>
		<dc:creator>Torsten Curdt</dc:creator>
		<pubDate>Tue, 18 Nov 2008 01:22:47 +0000</pubDate>
		<guid isPermaLink="false">http://www.metabrew.com/?p=196#comment-84</guid>
		<description>A simpler version http://vafer.org/blog/20061004103219 enough for most things.</description>
		<content:encoded><![CDATA[<p>A simpler version <a href="http://vafer.org/blog/20061004103219" rel="nofollow">http://vafer.org/blog/20061004103219</a> enough for most things.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
