Commit 96ae522
Changed files (1)
slides.md
@@ -20,22 +20,22 @@ Example syntax:
-L bind_interface:bind_port:target_address:target_port
```
-The `-L` creates a new listening socket at the specificied bind_interface and
-`bind_port` on the __CLIENT__ side that will shuttle packets received at that
-__CLIENT__ side socket listener through the secure ssh connection all the way to the
-ssh __SERVER__ where the __SERVER__ then iniitiates a new connection to the `target_host`
-and `target_port`
+The `-L` creates a new listening socket at the specificied `bind_interface` and
+`bind_port` on the __CLIENT__ side that will shuttle packets received at that
+__CLIENT__ side socket listener through the secure ssh connection all the way
+to the ssh __SERVER__ where the __SERVER__ then iniitiates a new connection to
+the `target_host` and `target_port`
> __Jargon:__ this is often called a Forward Tunnel
### Use Case
-I would like to connect to an RDP server (192.168.34.35) that is only
-accessible on a closed network that an ssh server (example.com) that I
+I would like to connect to an RDP server (`192.168.34.35`) that is only
+accessible on a closed network that an ssh server (`example.com`) that I
have access to is also on. I will create a forward tunnel that listens on
-the clients interface (127.0.0.1) at port 3389 which will transit the
+the clients interface (`127.0.0.1`) at port `3389` which will transit the
secure connection. Once on the other side the ssh server will create a new
-connection to the target RDP server on port 3389.
+connection to the target RDP server on port `3389`.
```
ssh example.com -L 127.0.0.1:3389:192.168.34.35:3389
@@ -64,9 +64,9 @@ the `target_host` and `target_port`
### Use Case
There is an existing web service that is running on example.com. It is
-configured to connect to its mysql instance at 127.0.0.1 and port 3306. I want
-to stop the mysql service running on example.com and run a test against a
-different set of data that is only on my ssh client machine. This database is
+configured to connect to its mysql instance at `127.0.0.1` and port `3306`. I
+want to stop the mysql service running on example.com and run a test against a
+different set of data that is only on my ssh client machine. This database is
3TB so I definitely don't want to send it up to the server just to do this
test.
@@ -101,10 +101,10 @@ __APPLICATION SPECIFIED__ targets
### Use Case
I want to browse an internal website that requires multiple connections
-to multiple domains and IP addresses on many different ports. The ssh
-server (example.com) has the appropriate network connectivity to initiate
+to multiple domains and IP addresses on many different ports. The ssh
+server (`example.com`) has the appropriate network connectivity to initiate
all of these connections. I will create a dynamic tunnel proxy at port
-9050. I will then configure my web browser to use that tunnel as a socks
+`9050`. I will then configure my web browser to use that tunnel as a socks
proxy. After this is setup all connections from firefox will be sent to
the socks proxy listener, transit the secure connection, and egress to the
correct target hosts and ports on the server's network.