Ahhhh ok. Thats a neat way to do it, using the -f option, when you're
coming from Linux. Very cool. Were you able to achieve the same effect
with any of the putty tools or do you still have to run putty first to
build the tunnel, switch to AccuTerm, and then connect?

Oh yea, one thing to note about these kinds of forwards and the role
the ssh server plays in it. The sshd proggie actually creates a new
TCP connection on the remote side to service the tunnel.

So from the point of view of the WinNT box anyone coming from the
tunnel will come from the IP of the machine running sshd, not their
original IP. All users connecting this way, even if they're coming
from many different locations will appear to the D3 box to all be
coming from the same place, that ssh server machine.

This could become problematic if you're looking at the logs on the D3
side expecting to see the actual IP folks are coming in from only to
find they're all coming from the same IP reguardless!! You'll have to
goto the ssh server to find their true source IP. No big deal really
but important to know when you go trouble shooting the connections.

Tedd

I asked this very question on this forum about a year ago and all I got
was "why would you do something stupid like that" & "I'll be happy to
do it for a fee" It's good to see more of you jump in to give
solutions. I ended up using cygwin http://www.cygwin.com/ I didn't
install the full package, just the ssh bits and inetutils. I needed
the cygwin telnet in inetutils in order to connect to D3. Once you get
everything installed, add a line to the .bash_profile file of your ssh
user that says "d3 localhost" (or your connection string of choice). I
wrote a sorta complete HOWTO that I think the RD people posted
somewhere on their support page. I can dig up the instructions if you
are interested. The only problem I ran into was the F keys don't seem
to be mapped correctly and I haven't gotten around to fixing that so if
anybody can help with that one, I'd appreciate it.

My Bad. The connect string should be something like "telnet
localhost", not d3 localhost.

For the 'F' key problem I'd try using an inetd "nailed telnet" approach
and avoid going through a telnet command line on the Linux server. It
seems like that's where term emulation problems would most likely
occur. The ssh login would just sit there and do nothing except
service the encrypted tunnel. It's ugly, but it works.

On Wed, 12 Apr 2006 09:01:43 -0700, Tedd wrote:

Yeah, if you setup the rsa key pair, then the user just clicks on the
icon, and gets a Pick login. Doesn't get much easier for the user than
that.

With WinXP, I use pageant to put an icon into the taskbar tray. You can
right click on it, select a saved putty session, and then click on the
AccuTerm icon. Two clicks instead of one, but it works.

Art