Campuses:
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| computing:network:firewall_and_proxies [2009/11/15 17:13] – allan | computing:network:firewall_and_proxies [2022/05/27 15:42] (current) – [External connections] cse-sull0153 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== | + | ====== |
| Physics runs a firewall configuration which blocks all unwanted incoming connections from both the university and the internet in general, and also controls traffic between the internal subnets. | Physics runs a firewall configuration which blocks all unwanted incoming connections from both the university and the internet in general, and also controls traffic between the internal subnets. | ||
| - | It is possible to set firewall exceptions for specific | + | It is possible to set firewall exceptions for specific |
| ===== External connections ===== | ===== External connections ===== | ||
| - | * Port 22/tcp (ssh) is the only port which is open to all internal hosts from everywhere on the internet. | + | * Port 22/tcp (ssh) is the only port which is open to all static |
| + | * spa-ssh-01.spa.umn.edu is the only host that is open to the world and DUO login is required unless an SSH key is used. | ||
| ===== Internal connections ===== | ===== Internal connections ===== | ||
| Line 19: | Line 20: | ||
| ===== SSH Tunnelling ===== | ===== SSH Tunnelling ===== | ||
| If you need to connect to a system inside Tate Lab from outside, most simple applications can be tunnelled using [[: | If you need to connect to a system inside Tate Lab from outside, most simple applications can be tunnelled using [[: | ||
| - | For example, VNC (a remote desktop application) can be tunnelled by following this guide: [[http://martybugs.net/smoothwall/puttyvnc.cgi|Tunneling VNC over SSH with PuTTY]]. | + | For example, VNC (a remote desktop application) can be tunnelled by following this guide: [[http://home.highertech.net/~john/ |
| ==== SSH Tunnelling Examples ==== | ==== SSH Tunnelling Examples ==== | ||
| Line 26: | Line 27: | ||
| < | < | ||
| - | > ssh -L1234: | + | $ ssh -L1234: |
| </ | </ | ||
| === Windows === | === Windows === | ||
| - | The guide [[http://martybugs.net/smoothwall/puttyvnc.cgi|Tunneling | + | The guide [[http://helpdeskgeek.com/how-to/ |
| ===== Proxies ===== | ===== Proxies ===== | ||
| Line 50: | Line 51: | ||
| ftp> | ftp> | ||
| </ | </ | ||
| + | |||
| + | Some ftp servers may not behave gracefully with the basic '' | ||
| + | ncftp -u anonymous@archive.stsci.edu ftp-proxy.spa.umn.edu | ||
| + | or for the non-anonymous version: | ||
| + | ncftp -u myusername@archive.stsci.edu -p mypassword ftp-proxy.spa.umn.edu | ||
| To connect to an ftp site using a web browser, you would use a URL like this: | To connect to an ftp site using a web browser, you would use a URL like this: | ||