-
Join the MyBroadband community
South Africa’s biggest forum. Discuss, discover, and connect with thousands of members.
-
Question of the Day: What's the most interesting small town you've visited in South Africa?
SSH client to support multiple jump hosts
- Thread starter bar1
- Start date
SSH tunnels and port forwarding · Mobatek blog
A life saver feature: SSH tunnels and port-forwarding
ok this seems to work....i wasn't too keen on creating a tunnel but its actually a cool solution.
Just a 1 click solution to ssh to a server behind 4 jump hosts.
Are you prompted for passwords? Or did you just create a really easy pivot for an attacker
SauRoNZA
Honorary Master
There isn’t a better product that Mobaxterm on this planet and I wish they would create a bloody Mac and Linux client because it is that good.
For this trick however you might need to command line it. (Which I seem to recall you can add to a GUI bookmark).
For this trick however you might need to command line it. (Which I seem to recall you can add to a GUI bookmark).
Looks like the beta supports multiple jump hosts https://mobaxterm.mobatek.net/preview.html
gfmalan
Expert Member
I use Termius, wonder how MobaxTerm compare.
shadow_man
Executive Member
Why not just use SSH's ProxyJump or JumpHost directives???
You don't need a fancy client to do this. It's already considered a basic SSH feature.
$ man ssh
-J destination
Connect to the target host by first making a ssh connection to the jump host described by destination and then establishing a TCP forwarding to the ultimate destination from there. Multiple jump hops may be specified separated by comma characters. This is a shortcut to specify a ProxyJump configuration directive.
aka
ProxyJump
$ ssh -J host1,host2,host3 your_final_host
WHY do you specifically need a GUI to do this?!?
You don't need a fancy client to do this. It's already considered a basic SSH feature.
$ man ssh
-J destination
Connect to the target host by first making a ssh connection to the jump host described by destination and then establishing a TCP forwarding to the ultimate destination from there. Multiple jump hops may be specified separated by comma characters. This is a shortcut to specify a ProxyJump configuration directive.
aka
ProxyJump
$ ssh -J host1,host2,host3 your_final_host
WHY do you specifically need a GUI to do this?!?
SauRoNZA
Honorary Master
It’s a good effort and a nice clean interface but MobaXterm kicks it’s ass.
A simpler more Termius like version of Moba could have been perfect.
SauRoNZA
Honorary Master
MobaXterm saves bookmarks and also passwords so it makes things a bit easier to manage.
But like I said in my first post I’m pretty sure you can add the command line to your bookmarks and do exactly what you describe.
Being back on a Mac now it’s the one App I miss from my Windows days as an all in one gateway.
Something to bear in mind is that MobaXterm also does a great many other protocols like RDP and SFTP etc so it’s a nice centralised place to work from.
Sure I can setup aliases in my Zsh config file like I’ve done already and while it works it’s not quite as elegant.
SauRoNZA
Honorary Master
It’s nice and all but nowhere in the same ballpark.
It also doesn’t add anything worth really using it over the built in terminal.
shadow_man
Executive Member
Call me old school, but you shouldn't be saving passwords - and you should be using keys (unless you're referring to the RDP bits),
Mobax is useful in the fact that it easily allows people to tunnel, forward x11 etc - but really it's overkill for something as simple as this.
Personally i'd just set a ssh "~/.ssh/config" file and add my hosts to that - so I can simply connect with a little one liner later - eg:
| Host forum HostName www.mybroadband.co.za ProxyJump my_user@my_jumhost.com:22 User bob |
$ ssh forum
SauRoNZA
Honorary Master
The passwords are encrypted. In fact they are more secure than the keys stored on most machines for SSH.
You can also share them transparently and safely with others in your Organization.
And you can’t always dictate to customers how you want to connect so you take what they give you.
And of course you can use keys along with passwords.
And yes it refers to RDP as well.
Command line is fine when you connect to a handful of things irregularly. MobaXterm comes into play when you have tens of different connections of different types all in one place and grouped etc.
I recall having 80 or so connections when I still used it.
Command line would only cover a hand full of them being SSH. The rest would need something in a GUI regardless so why not just put them all there.
gfmalan
Expert Member
From my perspective it would be Termius,
I use it across all my Apple devices, sync everything between Mac iPhone and iPad.