ssh tunnel hangs on connect

[mversaci]

Hi,

I'm trying to create a ssh tunnel from an HPUX box (HPUX 11.i, HPUX Sec Shell A.04.30.002) to a box at a vendor location (hardware& O/S unknown). This has worked for other sites, but I'm down to 2 different servers that hang upon connection.

Setting up tunnel by the command:

ssh -n -l sshuser -L:10025:remote.node.com:23 tunhost -N

try to connect by:

sftp -v -oPort=10025 remote_user@localhost

The connection hangs, then time outs:

Connecting to localhost...
OpenSSH_3.9, OpenSSL 0.9.7d 17 Mar 2004
HP-UX Secure Shell-A.03.91.002, HP-UX Secure Shell version
debug1: Reading configuration data /opt/ssh/etc/ssh_config
debug1: Connecting to localhost [127.0.0.1] port 10025.
debug1: Connection established.
debug1: identity file /home/data/.ssh/id_rsa type 1
debug1: identity file /home/data/.ssh/id_dsa type -1

channel 1: open failed: connect failed: Connection timed out
channel 2: open failed: connect failed: Connection timed out
channel 3: open failed: connect failed: Connection timed out
ssh_exchange_identification: Connection closed by remote host
Connection closed

I can connect OK without the tunnel, but I will be forced to use a tunnel shortly.

Any ideas ? Thanks - Mike

[Court Campbell · Accepted solution]

Being that you know nothing about the other host this is hard to troubleshoot. I am confused about this. You say you can connect without the tunnel. I assume you are using telnet without the tunnel. Can you not logon to the other box and type "uname -a". What am I missing. Also if the telnet port is open why would you need to tunnel? I dunno this just sounds confusing. It's also wierd that you are trying to sftp to a telnet port. Is ssh running on port 23 of the other server?

[Steven E. Protter]

Shalom,

Looks like a simple networking problem, like the firewall is blocking the tunnel port.

SEP

[mversaci]

Court,

Thanks for the response. I reviewed your response, and I agree, I was vague in the description. When I said I could connect without the tunnel, I meant via sftp using the command sftp remote_user@remote.node.com, not through telnet. I don't have a telnet account on the remote end.

Also, I have been experimenting with this so much, that I accidentally attempted to go in through port 23 instead of port 22.

I changed the port to port 22, and am now able to connect to one of the servers. I'm still having a problem on the other.

Thanks for reading my question so closely, it helps to have someone proofread! Now, if I can only get that last server to connect

Thanks,
Mike