SSH Question 1

[romh]

I was reading this article from mysql.com

http://www.vbmysql.com/articles/security/gui-tunnel.html

it deals with using ssh instead of leaving port 3306 open. I have been leaving 3306 open in order to use query browser from an outside IP address. I am unclear about something in this article. It mentions that you can download the client program PUTTY which you have to open and connect to on the client before using query browser. But then it talks about a
"remote SSH host"
which is also illustrated in the sketch. I am unclear as to where I can find (download) this. My understanding is that this is not the same as PUTTY. PUTTY is the client side program that you need to open before using query browser.
Above all of this it talks about the software OpenSSH. Is this the SSH host? If so, there doesn;t seem to be any compatibility with windows from their webiste. My server is Windows running Mysql.

Please clarify this for me.

Last Question.
How would you go about using SSH through code. I access the mysql database by supplying the server IP address in the connection string. How would I go about doing this if I disable port 3306. Thanks

 

[azzazzello]

SSH can be used to TUNNEL other traffic through itself. That wasy, you can have 3306 running only for localhost clients, and using tunneling, forward port 3306 to remote computer once you use SSH to connect to the server. Read about it here

http://acd.ucar.edu/~fredrick/mpark/ssh/

 

[romh]

Thanks alot. So to answer my last question.

If I send SQL commands via odbc to a remote datase running mysql, would I have to open the SSH client before connecting to the mysql server via ODBC? Would it be correct to say, that once SSH is connected, any traffic to the remote server via port 3306, would be encrypted via SSH? Even if its done through code (Visual Basic) with ODBC and sql.

Thanks

 

[ericbrunson]

Yes.