FTP over SSH, private IP

Hi,

I am trying to ftp to a Suse Linux machine behind a firewall.
The machine's IP is not visible from outside, so I create a SSH tunnel like
this

my localhost (port 5000) ------- a solaris machine ------ linux

I was able to establish the control connection, but the linux machine
sent back its private IP address (192.16.27.34:26700), which my localhost
cannot use to establish the data connection. How do I fix this problem?
Thanks very much.


connecting to 127.0.0.1:5000
Connected to 127.0.0.1 port 5000
220 "Welcome to FTP service."
USER jsmith
331 Please specify the password.
PASS (hidden)
230 Login successful. Have fun.
PWD
257 "/home/jsmith"
Host type (I): UNIX (standard)
PASV
227 Entering Passive Mode (192,16,27,34,104,76)
connecting to 192.16.27.34:26700
- -
connecting to 192.16.27.34:26700
! Connection failed to 192.16.27.34 - connection timed out
! connect: error 0
PORT 127,0,0,1,8,89
500 Illegal PORT command.
! Failed "port":
! Retrieve of folder listing failed (0)

Jade Fox <(E-Mail Removed)> wrote:
> Hi,

> I am trying to ftp to a Suse Linux machine behind a firewall.
> The machine's IP is not visible from outside, so I create a SSH tunnel like
> this

> my localhost (port 5000) ------- a solaris machine ------ linux

> I was able to establish the control connection, but the linux machine
> sent back its private IP address (192.16.27.34:26700), which my localhost
> cannot use to establish the data connection. How do I fix this problem?
> Thanks very much.

Why not use scp?

--
Michael Heiming

Remove +SIGNS and www. if you expect an answer, sorry for
inconvenience, but I get tons of SPAM

> I am trying to ftp to a Suse Linux machine behind a firewall.
> The machine's IP is not visible from outside, so I create a SSH tunnel
> like this

FTP is too complicated (dual channel). sftp is designed to be secure, and
it's already a subsytem of openssh. Your server's sshd_config should have a
line like:
Subsystem sftp /usr/libexec/sftp-server

Once this is running just port forward your firewall:5000 to private:22