Iptables and reverse ssh tunnel to connect with IP camera

Question

I need to be able to access an IP camera that is on the same local network as a raspberry. I do not have access from the outside because it is a mobile data network that does not give me public IP or I can do NAT. I was thinking of creating a ssh reverse tunnel against a server on internet (Virtual Private Server). I would like that from any internet PC could put a domain with a port and redirected me to the web that is serving the IP camera, and this should be through the raspberry.

I was testing with iptables and ssh reverse tunnel but although the local port fordwaring works, the reverse tunnel didn't. I've tried with

sysctl net.ipv4.ip_forward=1
sudo iptables -t nat -A PREROUTING -p tcp --dport 1111 -j DNAT --to-destination 192.168.1.192:80
sudo iptables -t nat -A PREROUTING -p tcp --dport 1111 -j DNAT --to-destination 192.168.1.192:80

ssh -f -N -T -R22222:localhost:1111 user@myvps.com

Nothing happens if I try with http://myvps.com:22222

Thank you very much

Answer 1

Why use iptables at all if you want a ssh reverse tunnel?

Use

ssh -g -f -N -T -R22222:192.168.1.192:80 user@myvps.com

Assuming that 192.168.1.192:80 is the address of your camera and port 22222 is the port to listen on the remote server. No iptables, no forwarding needed for this.

You may need to allow the option -g on the server, see sshd_config, set GatewayPorts to yes.