X11 forwarding over Lunix Gateway

[Bosco Tsang]

My home has a Linux gateway using ipchain. I have F-Secure SSH 3.0 instead on my home's PC, along with Exceed 6.1. I have enabled X11 forwarding from sshd_config. But I still cannot run X-application and cause the display back to my home PC. Any step missing? How can I set make this works?

[Wodisch]

Hi,

well, did you configure your UNIX systems to forward X-over-SSH, too?

And is this working in the LAN of those UNIX systems?

Just my $0.02,
Wodisch

[Bosco Tsang]

X11 is working over LAN to/from any Unix host, including HPUX, Solaris and PC with Exceed. They are just not working on PC behind Linux ipchain gateway.

I have already config in the sshd_config for X forwarding.

[Jordan Bean]

I'm going to assume that IP forwarding and masquerading are enabled if you can successfully access from your home PC any of your remote UNIX servers via SSH. I am also going to assume that both the SSH client and servers are configured correctly for X11 forwarding.

My first question: Are you absolutely sure that your X11 activity is traversing the SSH tunnel? Check that $DISPLAY is set correctly by sshd to an address that is local to the remote host. Also make sure that your login profile is not overriding that value.

My next question: Is Exceed configured to accept connections from the PC's local interfaces including loopback?

[Bosco Tsang]

I am using F-Secure SSH 3.0 both at home and in the office, with same default settings. Strangely, when I connect to the server from office, $DISPLAY is setted correct (ie. to localhost:x.0. However, if I connect from home, which tunnel thru a Linux gateway, $DISPLAY report undefined variable. That's why I am wondering if there is some needed to be set in the gateway.

For your second question, Exceed should be setup correct, as I can display Linux gateway's X-application to PC without problem. But as that's just a low-end machine, I don't not enought X11 deamon.

Any idea or fix?

[Jordan Bean]

> I am using F-Secure SSH 3.0 both at home and in the office, with same default settings

In SSH Secure Shell, X11 tunneling is set per host, but is not enabled by default. Does F-Secure behave the same way?

[Paula J Frazer-Campbell]

Hi

Have you tried an x11 device in the chain just before the gateway?

Does it work?


Paula

[Bosco Tsang]

Answer to the questions ...

1. F-Secure don't have any X11 click box, but by default, X11 works (it's work at my office).

2. Yes, before going thru the gateway, it works.