Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

ssh port forwarding broken?

Did some thing change that would prevent me from port forwarding privileged ports?

eg

sudo ssh -L 22:$IPMI:22 -L 80:$IPMI:80 -L 443:$IPMI:443 -L 623:$IPMI:623 -L 17990:$IPMI:17990 -L 17988:$IPMI:17988 <remote server>

I use this to connect to a KVM port on a remote server.


This results in "channel 14: open failed: administratively prohibited: open failed" that seem to match the port 80 request. I have tried changing the 80 to 8080 or similar and still the same issue.


debug1: Connection to port 8080 forwarding to port 80 requested.

debug2: fd 21 setting TCP_NODELAY

debug3: fd 21 is O_NONBLOCK

debug3: fd 21 is O_NONBLOCK

debug1: channel 13: new [direct-tcpip]

debug3: send packet: type 90

debug1: Connection to port 8080 forwarding to port 80 requested.

debug2: fd 22 setting TCP_NODELAY

debug3: fd 22 is O_NONBLOCK

debug3: fd 22 is O_NONBLOCK

debug1: channel 14: new [direct-tcpip]

debug3: send packet: type 90

debug3: receive packet: type 92

channel 13: open failed: administratively prohibited: open failed

debug2: channel 13: zombie

debug2: channel 13: garbage collecting

debug1: channel 13: free: direct-tcpip: listening port 8080 for port 80, connect from 127.0.0.1 port 55455 to 127.0.0.1 port 8080, nchannels 15

debug3: channel 13: status: The following connections are open:

#12 client-session (t4 r0 i0/0 o0/0 e[write]/0 fd 18/19/20 sock -1 cc -1)

#14 direct-tcpip: listening port 8080 for port 80, connect from 127.0.0.1 port 55456 to 127.0.0.1 port 8080 (t3 nr0 i0/0 o0/0 e[closed]/0 fd 22/22/-1 sock 22 cc -1)



MacBook Pro

Posted on Oct 17, 2019 10:49 AM

Reply
Question marked as Best reply

Posted on Oct 21, 2019 8:01 AM

Not sure what happened but this is working again. The only odd thing was

that I was trying to connect to a device with a self-signed certificate

and that was generating the admin denied messages seen in the port

forward.

Similar questions

1 reply

ssh port forwarding broken?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.