[Freedombox-discuss] How to make a freedombox on non-public network available on the Internet

[Anders Jackson]

Den 1 nov 2013 11:50 skrev "Hamish Cunningham" <hamish at gate.ac.uk>:
>
> I think you mean "pagekite" -- and it's great!
>
> and already packaged for debian, where it installs and runs perfectly
> in my experience (on a Raspberry Pi)
>
> the author of pagekite also shares many FreedomBox goals, I believe
>
> so +1 :-)
>
> hamish cunningham
> http://gate.ac.uk/hamish/   http://pi.gate.ac.uk/
>
>
> On 1 November 2013 09:01, Petter Reinholdtsen <pere at hungry.com> wrote:
> > Hos should we make the services on a Freedombox on a non-public
> > network / behind NAT publicly available?  The pagekide system,
> > requested into Debian in <URL: http://bugs.debian.org/610358 > is one
> > complelling idea.  It allow one to get any port forwarded from
> > somewhere to somewhere else, and optionally buy services from the
> > company behind pagekide.net to have the end point hosted there.  And I
> > suspect we should try to get it into Debian for this purpose.  Any
> > volunteers to package it for Debian?
> >
> > Another, which I tested yesterday, is to use SSH to open a reverse
> > tunnel.  To get it working, pick a machine with a public IP address,
> > and add GatewayPorts clientspecified to sshd_config:
> >
> >   pere at www:~$ grep GatewayPorts /etc/ssh/sshd_config
> >   GatewayPorts clientspecified
> >   pere at www:~$
> >
> > Next, log in from a machine on the non-public network to the machine
> > with a public IP adress using the -R statement to open a listening
> > port on the public machine to a machine on the non-public net like
> > this:
> >
> >   ssh -R *:80:non-public-host:80 root at public-host
> >
> > If you lack root-access on public-host machine, you can pick a port
> > above 1024 (for example 8080) like this:
> >
> >   ssh -R *:8080:non-public-host:80 root at public-host
> >

Why not get it solved properly with IPv6 instead? With a firewall set up.
Just tunnel IPv6 over IPv4 if no native IPv6.

That would be a killer application for me.

/Anders
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/freedombox-discuss/attachments/20131102/f0745d25/attachment.html>