osdir.com
mailing list archive

Subject: ssh -D : the Coolest ssh trick yet. - msg#01182

List: org.user-groups.ale

Date: Prev Next Index Thread: Prev Next Index
In response to a question of mine awhile back, Jason Day pointed out the
-D flag to ssh, which allows ssh to function as a Socks v4 proxy.

Just wanted to forward this to the group, in case anyone missed it. It
has to be the coolest trick I've learned this year. It essentially
allows you to bypass any firewall or web filtering software (at least
for those applications that support Socks v4 proxies).

So, for two years now I've been unable to do certain things from work
because they required access via a web brower to uncommon port numbers
(6801, etc.) that are blocked by our company's firewall. I've also been
wary that Big Brother watches everything I do online here at work. Not
that I do anything like surf for pr0n or anything like that, but it's
just that unsettling feeling of being watched.

Anyway, ssh -D ends all that trouble.

Here's how you do it:

First, you have to have a box outside the firewall that you're able to
ssh into. I have a home mail server on my DSL connection, and that
works just fine. Second, your company's firewall has to allow ssh
through (ours does, fortunately).

So, it's as simple as connecting to your home machine using the -D flag,
followed by a port number that's not in use on your local machine.

ssh -D 5555 mylogin-Fx3TKirPuA8ctKeN9xuOhR2eb7JE58TQ@xxxxxxxxxxxxxxxx

Once you're logged in, point whatever application you want to run
through the proxy to localhost:5555. For mozilla, go to
Edit->Preferences->Advanced->Proxies. Choose "Manual proxy
configuration". In the SOCKS HOST: box, put 127.0.0.1, and in the Port
box to the right put 5555 (or whatever port you used). Also, select the
SOCKS v4 radio button below these boxes.

Ok out of the Preferences dialog, and there you go. Secure web surfing
from your company's LAN.

Make sure you don't close the terminal that's logged into your home
machine while you're using this feature.

Thanks to Jason for pointing this out.

John


Find Programming Jobs at git.net
(osdir sister site)

Thread at a glance:

Previous Message by Date: (click to view message preview)

Why is my filesystem fscking?

I just stopped auto-fs on a server and unmounted /dev/md0 cleanly. I turned around and restarted autofs and tried to cd to the filesystem. In turn it fsck'd the drive. It's done that the last 3 times autofs was restarted. Any ideas why? fstab: /dev/md0 /mnt/global1 ext2 noauto 1 3 auto.mnt: global1 -fstype=ext2 :/dev/md0 It's in the fstab with a fsck pass number so the filesystem will be checked and mount in the event of a crash. One odd note also: root 3092 1 0 08:31 pts/0 00:00:00 /usr/sbin/automount /mnt file /etc/auto.mnt root 3112 1 0 08:31 pts/0 00:00:00 /usr/sbin/automount /auto file /etc/auto.auto root 3131 3092 0 08:31 pts/0 00:00:00 /usr/sbin/automount /mnt file /etc/auto.mnt root 3132 3131 8 08:31 pts/0 00:00:23 /sbin/fsck.ext2 -p /dev/md0 It does though only show mounted once but occasionally it will mount up the files in /mnt multiple times. Thoughts, theories? Robert :wq! --------------------------------------------------------------------------- Robert L. Harris | PGP Key ID: E344DA3B @ x-hkp://pgp.mit.edu DISCLAIMER: These are MY OPINIONS ALONE. I speak for no-one else. Diagnosis: witzelsucht IPv6 = robert-Y6/AIJKt007MFIMGWPqnnw@xxxxxxxxxxxxxxxx http://ipv6.rdlg.net IPv4 = robert-nGTtcsG5Cm3MFIMGWPqnnw@xxxxxxxxxxxxxxxx http://www.rdlg.net pgp5gmQFpcTdQ.pgp Description: PGP signature

Next Message by Date: click to view message preview

Re: ssh -D : the Coolest ssh trick yet.

Has anyone been able to do an X -query <ip> via ssh port redirection. I tried to do it behind and interal nat to an public address. XDMCP uses UDP thus I was unsuccessful. On Thu, 2003-03-20 at 09:08, John Wells wrote: > In response to a question of mine awhile back, Jason Day pointed out the > -D flag to ssh, which allows ssh to function as a Socks v4 proxy. > > Just wanted to forward this to the group, in case anyone missed it. It > has to be the coolest trick I've learned this year. It essentially > allows you to bypass any firewall or web filtering software (at least > for those applications that support Socks v4 proxies). > > So, for two years now I've been unable to do certain things from work > because they required access via a web brower to uncommon port numbers > (6801, etc.) that are blocked by our company's firewall. I've also been > wary that Big Brother watches everything I do online here at work. Not > that I do anything like surf for pr0n or anything like that, but it's > just that unsettling feeling of being watched. > > Anyway, ssh -D ends all that trouble. > > Here's how you do it: > > First, you have to have a box outside the firewall that you're able to > ssh into. I have a home mail server on my DSL connection, and that > works just fine. Second, your company's firewall has to allow ssh > through (ours does, fortunately). > > So, it's as simple as connecting to your home machine using the -D flag, > followed by a port number that's not in use on your local machine. > > ssh -D 5555 mylogin-Fx3TKirPuA8ctKeN9xuOhR2eb7JE58TQ@xxxxxxxxxxxxxxxx > > Once you're logged in, point whatever application you want to run > through the proxy to localhost:5555. For mozilla, go to > Edit->Preferences->Advanced->Proxies. Choose "Manual proxy > configuration". In the SOCKS HOST: box, put 127.0.0.1, and in the Port > box to the right put 5555 (or whatever port you used). Also, select the > SOCKS v4 radio button below these boxes. > > Ok out of the Preferences dialog, and there you go. Secure web surfing > from your company's LAN. > > Make sure you don't close the terminal that's logged into your home > machine while you're using this feature. > > Thanks to Jason for pointing this out. > > John > > > > _______________________________________________ > Ale mailing list > Ale-S6NtOCTnm14@xxxxxxxxxxxxxxxx > http://www.ale.org/mailman/listinfo/ale

Previous Message by Thread: click to view message preview

Why is my filesystem fscking?

I just stopped auto-fs on a server and unmounted /dev/md0 cleanly. I turned around and restarted autofs and tried to cd to the filesystem. In turn it fsck'd the drive. It's done that the last 3 times autofs was restarted. Any ideas why? fstab: /dev/md0 /mnt/global1 ext2 noauto 1 3 auto.mnt: global1 -fstype=ext2 :/dev/md0 It's in the fstab with a fsck pass number so the filesystem will be checked and mount in the event of a crash. One odd note also: root 3092 1 0 08:31 pts/0 00:00:00 /usr/sbin/automount /mnt file /etc/auto.mnt root 3112 1 0 08:31 pts/0 00:00:00 /usr/sbin/automount /auto file /etc/auto.auto root 3131 3092 0 08:31 pts/0 00:00:00 /usr/sbin/automount /mnt file /etc/auto.mnt root 3132 3131 8 08:31 pts/0 00:00:23 /sbin/fsck.ext2 -p /dev/md0 It does though only show mounted once but occasionally it will mount up the files in /mnt multiple times. Thoughts, theories? Robert :wq! --------------------------------------------------------------------------- Robert L. Harris | PGP Key ID: E344DA3B @ x-hkp://pgp.mit.edu DISCLAIMER: These are MY OPINIONS ALONE. I speak for no-one else. Diagnosis: witzelsucht IPv6 = robert-Y6/AIJKt007MFIMGWPqnnw@xxxxxxxxxxxxxxxx http://ipv6.rdlg.net IPv4 = robert-nGTtcsG5Cm3MFIMGWPqnnw@xxxxxxxxxxxxxxxx http://www.rdlg.net pgp5gmQFpcTdQ.pgp Description: PGP signature

Next Message by Thread: click to view message preview

Re: ssh -D : the Coolest ssh trick yet.

Has anyone been able to do an X -query <ip> via ssh port redirection. I tried to do it behind and interal nat to an public address. XDMCP uses UDP thus I was unsuccessful. On Thu, 2003-03-20 at 09:08, John Wells wrote: > In response to a question of mine awhile back, Jason Day pointed out the > -D flag to ssh, which allows ssh to function as a Socks v4 proxy. > > Just wanted to forward this to the group, in case anyone missed it. It > has to be the coolest trick I've learned this year. It essentially > allows you to bypass any firewall or web filtering software (at least > for those applications that support Socks v4 proxies). > > So, for two years now I've been unable to do certain things from work > because they required access via a web brower to uncommon port numbers > (6801, etc.) that are blocked by our company's firewall. I've also been > wary that Big Brother watches everything I do online here at work. Not > that I do anything like surf for pr0n or anything like that, but it's > just that unsettling feeling of being watched. > > Anyway, ssh -D ends all that trouble. > > Here's how you do it: > > First, you have to have a box outside the firewall that you're able to > ssh into. I have a home mail server on my DSL connection, and that > works just fine. Second, your company's firewall has to allow ssh > through (ours does, fortunately). > > So, it's as simple as connecting to your home machine using the -D flag, > followed by a port number that's not in use on your local machine. > > ssh -D 5555 mylogin-Fx3TKirPuA8ctKeN9xuOhR2eb7JE58TQ@xxxxxxxxxxxxxxxx > > Once you're logged in, point whatever application you want to run > through the proxy to localhost:5555. For mozilla, go to > Edit->Preferences->Advanced->Proxies. Choose "Manual proxy > configuration". In the SOCKS HOST: box, put 127.0.0.1, and in the Port > box to the right put 5555 (or whatever port you used). Also, select the > SOCKS v4 radio button below these boxes. > > Ok out of the Preferences dialog, and there you go. Secure web surfing > from your company's LAN. > > Make sure you don't close the terminal that's logged into your home > machine while you're using this feature. > > Thanks to Jason for pointing this out. > > John > > > > _______________________________________________ > Ale mailing list > Ale-S6NtOCTnm14@xxxxxxxxxxxxxxxx > http://www.ale.org/mailman/listinfo/ale

Web Hosting Reviews from OSDir.com Sister Site iBizWebHosting.com

Home | News | Patents | Sitemap | FAQ | advertise | OSDir is an Inevitable website. GBiz & git.net are too!

Advertising by