[p4] Re: (no subject)

[Alex Nicolaou]

Raymond Wiker wrote:

>         One thing that should be kept in mind: when you connect a
> client to a remote server/network, the client should not have an
> unprotected connection to a public network.

This is certainly true if you use -R port forwarding, but is not such a
major consideration if you use -L port forwarding without -g. That is:
normally, when you forward ports from your local machine to the machine
on the ssh server side, those ports are only accessible by people logged
into the client machine, so even if it is exposed to the network the
risk is relatively small. If you use -g or -R, this is not true and the
client is a hole directly into the network "protected" by sshd.

alex