Trying to connect via X behind an MS ISA firewall

[Bluntman]

Hi,

I'm trying to do something that's supposed to be easy but I'm behind a Microsoft ISA server .

I have a Windows workstation running Xwin32 (X server like exceed) in my LAN and I'm trying to get to a Linux box that's on the internet.

I'm able to to connect via ssh1 to the linux box and of so execute this :
export DISPLAY="my.server.ip:0.0"

Theorically from what I've read , I just need to publish port TCP 6000 and UDP 177 in order for me to be able to create the X connection; but unfortunatly that doesn't work.

If anyone had any experience doing that kind of thing I would love to know how the problem had been solve ( what kind of rules and protocol definition do I have to create on the ISA server itself ).


Thanks

PS : I know that most of you would say to use a linux fw instead of MS ISA but I got no choice unfortunatly http://discussions.linuxplanet.com/smile.gif


LAN INTERNET
------------ | | -------
wkstation ---> |ISAfw|--> -->Unix server
------------ | | -------

[furrycat]

MS ISA server! Ho ho ho! What a pile of junk that is. Full of bugs. Full of incompatibilities and full of inexplicable failures.

However you're in luck 'cos you don't have to use it. ssh can do port forwarding for you. Anywhere you can ssh to, you can connect other ports to. In fact, ssh has a builtin command to handle X. Just set X11Forwarding to yes in your server's sshd_config and in your ssh_config (or use the -X switch when running ssh). X will then work magically. Do NOT set DISPLAY yourself. ssh does it for you.