cizra , 4 days ago

If your local machine is not reachable from the internet, you could set up the cheapest VPS - you can get a free one for 12 months at azure.microsoft.com/en-us/free/#all-free-servicesConnect from your destination machine (the firewalled one) to the VPS, and set up a reverse tunnel. For example, drop this into your ~/.ssh/config on the destination machine:

<span style="color:#323232;">Host rtun
</span><span style="color:#323232;">        Hostname something
</span><span style="color:#323232;">        RemoteForward 1234 localhost:22
</span>

tmux new-ses ‘while sleep 1; do ssh rtun; done’

Then configure your local machine to connect to destination via the jumpbox:

<span style="color:#323232;">Host vps
</span><span style="color:#323232;">        Hostname something
</span><span style="color:#323232;">
</span><span style="color:#323232;">Host destination
</span><span style="color:#323232;">        Hostname localhost
</span><span style="color:#323232;">        Port 1234
</span><span style="color:#323232;">        ProxyJump vps
</span>

ssh destination should work now.

Make sure to use SSH key auth, not passwords, and never transport secret keys off-machine. It’s easier to wipe and recreate a VPS, if you lose keys, than to explain to Security folks how you were the donkey that enabled the breach.