[PVE-User] ssh tunnel reverse

[Alexandre Kouznetsov]

Hello.

El 19/11/12 09:17, Luis Díaz escribió:
> netstat -tanpu
> http://i.minus.com/ibawGESjmRs3xd.png
Great, you proxmox seems top be up ans listening on port 8006

> root at mipc:~$ telnet 190.170.71.109 8006
> Trying 190.170.71.109...
> Connected to 190.170.71.109.
> Escape character is '^]'.
Even better, the port 8006 seems to be reachable from your workstation.
(assuming 190.170.71.109 is your proxmox server)

> tunnel reverse:
> root at mipc:/home/user1# ssh  -l 1234:127.0.0.1:8006
> <http://127.0.0.1:8006> userxyz at 190.170.71.109
> <mailto:userxyz at 190.170.71.109>
> Received disconnect from 190.170.71.109 <http://190.170.71.109>: 2: Too
> many authentication failures for userxyz
It seems like your fail2ban is still working. Check it's documentation 
for reference how to disable it, or at least clear your client host ban.

> Finally, try https://xxx.xxx.xxx.xxx:8006
> <https://xxx.xxx.xxx.xxx:8006/> in your browser, and tell specifically
> what error (if any) do you get. An exact quotation is important.
>
> http://i.minus.com/iCtpfuylTldqv.png
> http://i.minus.com/ib1LN6Rz5vCDiL.png
Are you using a proxy server? Try disabling proxy, at leas for HTTPS.
Have you tried any other browser? Chrome's error messages seems to be 
not too descriptive.

Are your hosts 190.170.71.109 and 190.170.71.69 on the same network? 
What about host "mipc"? Is it behind a NAT, or it uses 190.170.71.69 
directly? I have seen the error you describe when more than one NAT in a 
row was used, which is a pretty wired setup.

--
Alexandre Kouznetsov