4Ağu
Is it better to leave my SSH reverse tunnels exposed on a server, or expose them through tcp forwarding?
This is a follow up on When I use SSH tunneling, can I assume that the server does not need to be trusted?
When I am using an intermediate server I to connect to my endpoints via SSH tunnels, is it better if I don't leave their ports open at I, but instead connect to them via SSH TCP forwarding? So, I first connect to I, then connect to the hosts?
Additional information: Instead of making my hosts publicly available through ports on I, I make them locally available on I, then connect to I, forward the ports through this connection, and then connect?