Untitled

edit /etc/sshd_config:
PermitTunnel yes
PermitRoot yes

create tunnel client side:
sudo ssh -Nfw 0:0 <public_server_ip>
sudo ifconfig tun0 172.16.0.2 netmask 255.255.255.0
sudo route add -net 172.16.0.0 netmask 255.255.255.0 dev tun0

(mac os: sudo ifconfig tun15 172.16.0.2 172.16.0.1)
(mac os: route add -net 172.16.0 -interface tun15)


create tunnel server side:
sudo ifconfig tun0 172.16.0.1 netmask 255.255.255.0
sudo route add -net 172.16.0.0 netmask 255.255.255.0 dev tun0


set up routing client side:
sudo route add -host <public_server_ip> gw <current_gw_of_client>
sudo route add -net 0.0.0.0/0 gw 172.16.0.1
sudo route del -nat 0.0.0.0/0 gw 83.142.84.225

(macos: route add -host <public_server_ip> <current_gw_of_client>)
(macos: sudo route add -net 0.0.0.0/0 172.16.0.1)
(macos: route delete -net 0.0.0.0/0 192.168.2.1)


natting server side:
echo 1 |sudo tee /proc/sys/net/ipv4/ip_forward
sudo sysctl -w net.ipv4.ip_forward=1net.ipv4.ip_forward=1
sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE