# Port-Forwarding
## ABOUT
**Port forwarding** is a technique that allows us to **redirect a communication request from one port to another**. Port forwarding uses **TCP** as the primary communication layer to provide interactive communication for the forwarded port. Basically if shortly:
* **Local Port-Forwarding** is like regular shell. Forwards our traffic through port to victim host port
* **Remote Port-Forwarding** is like reverse shell. To bypass firewall we make victim host to forward traffic to our host
* **Dynamic Port-Forwarding** is just a proxy, working with inbound and outbound traffic
## **LOCAL PORT FORWARDING**
Local port forwarding allows you to forward traffic from your local machine to a remote server. This is commonly used to access services behind a firewall or to create a secure channel for data transmission.
### **Use case**
Accessing an intranet site or database from your local machine using SSH.
### **Example**
```bash
ssh -L :: user@
```
## **REMOTE PORT FORWARDING**
Remote port forwarding allows a **remote system to open a listening port and forward incoming traffic through an SSH tunnel to a service running on your local machine or another internal host**.
### **Use Case 1 — Accessing a Local Service from the Remote Host**
In this scenario, the remote system opens a port that **only the remote host itself can access** (typically bound to the loopback interface).
Traffic sent to this port is forwarded through the SSH tunnel to a **service running on the local machine**.
```bash
ssh -R :localhost: user@
```
### **Use Case 2 — Exposing a Service to the Remote Network**
In this scenario, the remote machine opens a port that is **accessible from other systems on the network**, not just the remote machine itself.
Traffic arriving at this port is forwarded through the SSH tunnel to a specified destination.
```bash
ssh -R ::: user@
```
## **DYNAMIC PORT FORWARDING**
A SOCKS5 proxy created with SSH allows your local machine to **forward traffic from a local port to any host reachable from the remote machine**. Instead of forwarding traffic to a single fixed destination, **it dynamically routes connections to different targets**.
This effectively allows your system to **use the remote machine as a network pivot**, accessing hosts that are only reachable from that machine. \
When combined with ProxyChains, many tools can transparently use this proxy for network scanning, enumeration, or accessing internal services.
### **Use case**
Bypassing firewalls, anonymizing traffic, or routing web browsing through an SSH tunnel.
### **Example**
```bash
ssh -D user@
```
This creates a SOCKS proxy on `localhost:`. Applications configured to use this proxy will route traffic through the SSH server dynamically.
## RESOURCES
{% embed url="" %}
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://venator17.gitbook.io/bibliotheque/networking/pivoting/port-forwarding.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
.png?alt=media&token=51fba0b8-9a35-4f07-9c17-389e954ba130)
.png?alt=media&token=bf4efba0-c891-4c6b-a038-c0f10f4e3e1e)