How to make SSH remote port forward that listens 0.0.0.0

Question

I need to do remote port forwarding that will listen 0.0.0.0 instead of 127.0.0.1 on the remote machine so that I can connect from outside internet to IP_OF_BBB:SOME_PORT in order to connect to SSH port of AAA.

I managed to make this happen by the following:

AAA:~$ ssh -R 22:localhost:2222 user@BBB
BBB:~$ ssh -L 2222:*:2223 user@localhost

Now I can connect to AAA with this command:

ssh user@BBB -p 2223

The local port forwarding is a workaround, of course. Is there any clearer way to do this?

score 19 · Accepted Answer · edited Apr 13 '17 at 12:22

19

Enable GatewayPorts in sshd_config (by default it is disabled). Enabling it will instruct sshd to allow remote port forwardings to bind to a non-loopback address. AskUbuntu has a similar question about Reverse Port Tunneling that goes into more details.

edited Apr 13 '17 at 12:22

Community

1
1

answered May 21 '14 at 12:01

Linville

3,146
1
24
35

use @anton-bessonov's [answer](https://stackoverflow.com/a/62142365/210475) to avoid having to modify your sshd_config. – ZombieDev Jun 15 '20 at 15:27

score 9 · Answer 2 · answered Jun 01 '20 at 23:11

9

As addition to the existing answer you can use ssh -o GatewayPorts=true -L 2222:0.0.0.0:2223 user@localhost

answered Jun 01 '20 at 23:11

Anton Bessonov

6,992
3
29
33

Thanks! this worked exactly as I needed – yorch Feb 02 '21 at 04:07
This should be the accepted answer. – LUser Mar 16 '21 at 19:08
1

The `-o` flag was not working for me. The question above worked. – camposer Mar 22 '21 at 10:13
Same for me, using the `-o` flag didn't work and the connection was still bound to localhost, enabling the `GatewayPorts` option in the config worked without any issues. – MrPowerGamerBR May 16 '21 at 16:49

score -1 · Answer 3 · edited Jul 05 '20 at 00:10

-1

BBB :ssh command should be:

BBB:~$ ssh -L 2223:*:2222 user@localhost

edited Jul 05 '20 at 00:10

elcortegano

1,711
10
27
43

answered Jul 03 '20 at 10:22

firesoules

1
1

How to make SSH remote port forward that listens 0.0.0.0

3 Answers3