|
How to configure port forwarding in F-Secure, one of the commercial SSH
clients, is discussed in this separate FAQ, because it is different and more
complicated than in other SSH clients. For a general discussion on how to
configure most SSH-clients, see the Great SSH
Primer.
You can either download the following configuration files:
F-secure config file for PCs
F-Secure config file for Macs
To use these configuration files, do the following:
If you're on a Mac, after the preference file has been downloaded, it will
need to be un-bin-hqx'd, if your browser did not do so already. Use a program
such as Stuffit Expander, available from
http://www.aladdinsys.com/expander/index.html to decode it.
Before you start F-Secure, check your preferences in the programs you
want to tunnel. For example, in Eudora, go to the "Special" menu and
choose "Settings..." Click on the "Hosts" icon and make sure the "Mail:"
field reads 'localhost'. Remember that F-Secure will only catch
connections that point to 'localhost'. Other programs may ask for the
'POP server' if you are using POP, or the 'IMAP' server if you are using
IMAP.
Now that everything is set, start F-Secure by double clicking on the file
that you downloaded and decoded. Close the "Properties" window that is
in the foreground. For some reason, this window always appears when one
starts the program. We have not yet found a way to disable this. If the
"Connection Manager" window is not present, do so by selecting the "SSH"
menu and choosing "Connection Manager." Now click on the icon that looks
like a folder and says "Chemistry", and then click on the "Connect"
button. You will soon be prompted for your username and password for the
chemistry server. (Note: after the first time, it will only ask you for
your password!) Input your information.
A terminal window (looks like a telnet session) will appear. DO NOT
CLOSE IT OR LOG OUT! If you do so, the tunnels will also close up. Once
everything is connected at this point, you may simply hide the application to
get it out of your way. On a Mac, you can do so by choosing "Hide F-Secure
SSH2" from the application menu (the one on the uppermost right hand side of
your screen that shows the icons of all running programs.)
Now check that a tunnel is working by opening up your browser and
putting:
http://localhost into the URL field at the top of the browser. If
everything is OK, you will be taken to our home page. You do not need to
check this every time, just the first to make sure everything is OK. You
may now check you mail
When you are done, switch back to F-Secure, and either type "exit" in the
terminal screen OR click on the Chemistry Folder icon in the Connection
Manager and click the "Disconnect" button above it. You may now exit the
program normally by choosing "Quit" from the "File" menu.
Or you can follow this general description:
- Start in the 'Connection Manager'
The first time F-Secure is launched, you are presented with the Connection
Manager (If not, then choose 'Connection Manager' from the SSH menu.)
- Make a 'Group' and set Group-wide configuration options
It is necessary to have your SSH terminals and tunnels in what the program
calls a 'Group.' To create a group, either choose "New Group" from the file
menu, or click on the icon in the connection manager that looks like a
folder. In order to save time configuring, we can set up some initial
preferences that the whole group will share. Double-click on the newly
created group icon in the connection manager (it will look like a folder as
well.) Give the group a name in the "Document" preferences: something like
'Chemistry Group.' Now click on the "Connect" preferences, and make sure
'Override Connection Parameters' is checked. Now input the SSH server into
the box as: chemistry.ohio-state.edu. You needn't change the port setting,
but it should be set to port 22. Now input your chemistry username into the
appropriate box, and make sure 'Password Authentication' is checked. Now
click on the "Security" preferences and make sure BOTH 'Allow connection link
sharing' and 'Enable Data Compression' are checked.
- Create a terminal
Now create a terminal by choosing "New Terminal" from the File menu. Notice
that a new icon now appears in the connection manager. If it is not indented
in the list, you will need to drag the new icon on top of the folder to make
sure that is it contained in your group. Your new terminal will adapt the
settings from the group so long as it is contained in the group, and no
preference modifications are necessary, except for giving it an appropriate
name in the "Document" tab. You can name it whatever you like, but it should
be descriptive so that you know what it is later: say, "Chemistry
terminal".
- Create tunnels for any services you wish
You may now create additional tunnels by choosing "New TCP Tunnel" from the
File menu. For any new tunnels make sure the tunnel is also contained in the
group by checking to see that the new icon is indented. If not, then follow
the procedure above to put it into the group. The only preferences to modify
here are the "Document" and "Tunneling" preferences, so first name the tunnel
by clicking on the "Document" tab, and give the tunnel an appropriate name.
Next, click on the "Tunneling" tab. The source should be 'This Macintosh',
and you can select which port to capture by either manually typing it in, or
choosing from the list in the drop down menu on the right. Choose the
destination server and the port in the bottom portion of the window. This
will usually be chemistry with the same port that you are tunneling, unless
you are wanting to access a machine other than chemistry. When finished,
click on the close box. You can create as many tunnels as you like.
- Save the 'Group'
You should now save your new group so that you can use it later by choosing
'Save As' from the File menu. You can give it any name you like, and save it
in any location you like. The next time you launch F-Secure, you should do
so by double-clicking on this file.
- Bind all group items (if desired)
To connect all terminals and tunnels at once, click on the group icon in the
connection manager (the one that looks like a folder), and then click on the
'Connect' button. You will be prompted only for your password, as you have
already told it your username.
- Test the new Group
When finished, simply choose the group (the folder icon) in the connection
manager and click on the 'Disconnect' button to disconnect all associated
terminals and tunnels.
- Making changes later
If you wish to add another tunnel, or change the settings of one of them
after you have already connected, you should disconnect, quit the program, and
re-launch it by double clicking on the file that you saved previously.
|