Editing SSH Port Forwarding:Overview

This document describes the SSH port forwarding system architecture and how it works.

== Architecture ==

=== Components ===

==== '''Configuration File''': <code>/etc/ssh-port-forwards.conf</code> ====
   * Defines all SSH port forwards in a simple format

   * One device per line

== '''Management Script''': <code>/usr/local/bin/ssh-port-forward-manager.sh</code> ==
   * Adds, removes, and lists SSH port forwards

   * Applies iptables rules automatically

   * Validates configurations

== '''Integration''': <code>/etc/openvpn/iptables-restore.sh</code> ==
   * Automatically applies all port forwards when VPN starts

   * Ensures rules persist after reboots

=== How It Works ===

<pre>
External Client → VPS:EXTERNAL_PORT (e.g., 22222)
  → iptables DNAT rule
  → VPN Tunnel (tun0)
  → VPN_DEVICE:SSH_PORT (e.g., 10.8.0.2:22)
</pre>

== Current Configuration ==

To see the current configuration:

<pre class="lang-bash">
cat /etc/ssh-port-forwards.conf
</pre>

To see active iptables rules:

<pre class="lang-bash">
== View DNAT rules ==
iptables -t nat -L PREROUTING -n -v | grep DNAT

== View FORWARD rules ==
iptables -t filter -L FORWARD -n -v | grep -E "10\.8\.0\."
</pre>

== Related Documentation ==

* [[Documentation:Configuration](Configuration|- Configuration file format

* [Management]])(management.md) - Managing port forwards

* [[Troubleshooting:Port Forwarding Troubleshooting|Troubleshooting]] - Troubleshooting guide

[[Category:Documentation]]
[[Category:Documentation/SSH Port Forwarding]]