SSH tunnel for ssh traffic

[Matt Domsch]

On Thu, Apr 15, 2010 at 04:12:20PM +0200, Christoph H?ger wrote:
> Hi,
> 
> I need to ssh to some remote VM that sit in a private LAN. For any other
> service (e.g. RDP) I'd use ssh tunneling just normal.
> But what do I do for ssh traffic? Since ssh is not host agnostic, it
> will always complain about localhost having a different RSA key.
> I just do not want to edit the known_hosts every time I need to connecto
> to a new machine!
> 
> Is there some way to tell ssh to use a tunnel directly for a
> connection?

you want to use ProxyCommand lines in .ssh/config, rather than local
redirects.  



Host deeper-inside
     HostName 192.168.1.2
     ProxyCommand ssh inside nc %h %p

Host inside
     HostName 192.168.0.2
     ProxyCommand ssh outside nc %h %p


where outside is the public host name/IP, inside is one level inside
your private network, directly reachable by host outside, and
deeper-inside is 2 levels deep, directly reachable by host inside.


$ ssh deeper-inside


Thanks,
Matt

-- 
Matt Domsch
Technology Strategist
Dell | Office of the CTO