[kwlug-disc] ssh and port forwarding

[Rashkae]

Robert P. J. Day wrote:

> 
>   in my case, i really only need the encryption on the first segment,
> from the user to the corporate VPN.  once i'm in, the second
> connection from the host2 gateway to host3 can be insecure.  but it
> doesn't hurt to secure both of them, it's just overkill.
> 

I know you already said you wanted to do everything from host2, but in
this case, the simplest way to go is, from host1:

ssh -L localhost:1234:host3:22 host2

And, also from host1 (ie, in another terminal window, for example)

ssh localhost -p 1234