[mythtv-users] MythWeb from outside my lan (from internet)

[Mike Perkins]

Robert Johnston wrote:
> On Sun, Sep 27, 2009 at 11:03, Tom Dexter <digitalaudiorock at gmail.com> wrote:
>> Also, this works fine with ssh running under cygwin.  I find that much
>> easier frankly than screwing with putty's inexcusably awful UI.    ssh
>> run from within cygwin can use private keys generated with ssh-keygen
>> as-is.
> 
> As it is, I find PuTTY's UI quite intuitive. It does everything that's
> necessary for the large number of protocols and options it supports,
> in a way that's fairly clear and concise. And while I'm sure there is
> a way, I haven't found how to set up additional forwards in an ssh
> session once it's already running (which PuTTY supports also)
> 
>> All you need to do is set up ssh access from the outside to any box on
>> your lan (not necessarily the myth backend) and then set up the tunnel
>> with:
>>
>> ssh -L localhost:<any_port_number>:<lan_address_of_myth_backend>:80
>> user@<remote_ip>
> 
> putty -ssh -L <localport>:<remoteaddress>:80 <user>@<serveraddress>
> 
> Is an equivalent of the above command, incidentally, so you don't have
> to go through the hideous installation of the whole of cygwin for a
> single command.
As an aside to the above discussion, *please* don't use the default ports for 
http (80) and ssh (22) on the external interface on your firewall but instead 
use other "random" ports and forward them. The defaults will get unmercifully 
hammered 24/7 by bot probes from all corners of the globe. Using these is just 
asking for trouble.

-- 

Mike Perkins