堡垒机怎样和防火墙的连接

import paramiko

# 配置堡垒机信息
bastion_host = 'bastion.example.com'
bastion_port = 22
bastion_username = 'admin'
bastion_password = 'password'

# 配置目标服务器信息
target_host = 'internal-server.example.com'
target_port = 22

# 创建SSH客户端
ssh_client = paramiko.SSHClient()
ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy())

# 连接到堡垒机
ssh_client.connect(bastion_host, port=bastion_port, username=bastion_username, password=bastion_password)

# 创建一个通道，通过堡垒机连接到目标服务器
transport = ssh_client.get_transport()
dest_channel = transport.open_channel("direct-tcpip", (target_host, target_port), ('localhost', 0))

# 连接到目标服务器
target_ssh_client = paramiko.SSHClient()
target_ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
target_ssh_client.connect(target_host, port=target_port, sock=dest_channel)

# 执行命令
stdin, stdout, stderr = target_ssh_client.exec_command('ls -l')
print(stdout.read().decode())

# 关闭连接
target_ssh_client.close()
ssh_client.close()