LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 09-14-2005, 06:57 PM   #1
Jubalint
Member
 
Registered: Mar 2004
Distribution: Debian
Posts: 35

Rep: Reputation: 15
Tunneling Through a Firewall


Hello. I'm running Windows XP Pro and Ubuntu 5.04 on my home comp. I have a pretty restrictive firewall on my network that stealths all ports as far as I can tell. I can only connect out through ports 21, 22, 80, and 443.

I also rent a linux (CentOS4.1) server.

I'm looking for a solution that I can setup a tunneling proxy so that I can route ALL (as in not just socks and such aware things, but games and such) traffic to my server and then to the net. I've been having very bad luck getting SOCKS5 to do any of this (the NEC socks won't make, Dante for some reason when I start doesn't show up). So I'm wondering if anyone knows a alternate solution I can use, or maybe even just a better socks implimentation?

Thanks for you help .
 
Old 09-14-2005, 11:17 PM   #2
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
Since you can go out on port 22, why not ssh tunnel your traffic out to some proxy? I do this through dante on my home network (tunnel AIM from work for privacy).
 
Old 09-15-2005, 04:07 AM   #3
server-solution
Member
 
Registered: Sep 2005
Posts: 33

Rep: Reputation: 15
Talking

Quote:
Originally posted by Matir
Since you can go out on port 22, why not ssh tunnel your traffic out to some proxy? I do this through dante on my home network (tunnel AIM from work for privacy).
ssh is secure and the firewall would pick this up and block it, instead use 443 as this is the same type of protocol and the proxy wont know the difference, remember to set a redirect on your home router for this as well
 
Old 09-15-2005, 09:35 AM   #4
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
Quote:
Originally posted by server-solution
ssh is secure and the firewall would pick this up and block it, instead use 443 as this is the same type of protocol and the proxy wont know the difference, remember to set a redirect on your home router for this as well
What makes you think ssh would be blocked by his firewall? He specifically stated that port 22 is open on his firewall.
 
Old 09-15-2005, 09:39 AM   #5
server-solution
Member
 
Registered: Sep 2005
Posts: 33

Rep: Reputation: 15
Sorry didn't read it correctly, thought ssh was blocked
 
Old 09-15-2005, 10:00 AM   #6
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
It's cool. Just making sure I wasn't missing something.
 
Old 09-15-2005, 05:47 PM   #7
drdabbles
LQ Newbie
 
Registered: Aug 2005
Location: Manchester, NH, USA
Distribution: Gentoo/Ubuntu
Posts: 1

Rep: Reputation: 0
If you are allowed, you could install something like OpenVPN on your rented server. This, of course, assumes that it is hosted off site.

OpenVPN is unique in that you can send traffic over any port you wish, it works on both Windows and Linux, AND it doesn't require any special protocol level knowledge/forwarding from the router or firewall (such as IPSEC, etc.).

Of course, you could also tunnel with SSH, but I've found that SSH can be a bit more troublesome. If your connection is terminated, SSH will not automagically try to reconnect. OpenVPN does.

just my $.02USD
 
Old 09-15-2005, 06:11 PM   #8
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
SSH may not auto-reconnect, but overall, SSH is a much simpler mechanism for the tunneling. That being said, OpenVPN is a good suggestion as well.
 
Old 09-20-2005, 07:44 AM   #9
Jubalint
Member
 
Registered: Mar 2004
Distribution: Debian
Posts: 35

Original Poster
Rep: Reputation: 15
Alright I've tried to setup dante over my ssh without luck. I got squid to work great though, so no problems tunneling that.

Whenever I start dante with the sockd command it returns fine, but the process doesn't actually start... what's up with that? Any other socks implementations I can try?
 
Old 09-20-2005, 07:53 AM   #10
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
You should probably be starting it using an init script. On my box, that's /etc/init.d/dante-sockd.
 
Old 09-20-2005, 11:09 AM   #11
Jubalint
Member
 
Registered: Mar 2004
Distribution: Debian
Posts: 35

Original Poster
Rep: Reputation: 15
When I do ./configure with dante I get this at the end:
Acceptlock: workaround enabled on this platform
Preloading: OK
SO_SNDLOWAT: not enabled for this platform
select: OK
Routeinfo: OK

Is not having SO_SNDLOWAT a problem? I googled it and wasn't really able to tell.

EDIT: Ok, now I'm getting somewhere. I installed the dante module on webmin to see if I could get it to start from there. When I try to start it through webmin I get this:
Start not successful
Error: 0, message: 256
Any ideas what that means?

The only dante related file i have in /etc/init.d/ is dsocksify. No sockd or dante in there.

Last edited by Jubalint; 09-20-2005 at 11:29 AM.
 
Old 09-20-2005, 11:28 AM   #12
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
No, not having SO_SNDLOWAT is not problematic.
 
Old 09-20-2005, 11:31 AM   #13
Jubalint
Member
 
Registered: Mar 2004
Distribution: Debian
Posts: 35

Original Poster
Rep: Reputation: 15
Is there a way to just do a complete uninstall of everything dante related? I tried make uninstall and then reinstalling it but that didn't help. Are there any dependancy's for dante I might not be getting?
 
Old 09-20-2005, 11:55 AM   #14
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
What happens when you try to install it? The SO_SNDLOWAT error will not go away. SO_SNDLOWAT is not implemented on Linux, as SNDLOWAT is always 1. (Defined in kernel)
 
Old 09-20-2005, 01:22 PM   #15
Jubalint
Member
 
Registered: Mar 2004
Distribution: Debian
Posts: 35

Original Poster
Rep: Reputation: 15
I have no trouble installing dante. No errors or other such things pop up. It just goes through and does make install fine.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Tunneling Randvegeta Linux - Networking 4 09-21-2005 10:42 AM
X tunneling with SSH phekno Linux - Networking 3 05-31-2005 10:43 AM
incoming tunneling or tunneling via a 3rd party? JustinHoMi Linux - Networking 1 04-15-2005 01:57 PM
IP-in-IP Tunneling problems rickthemick Linux - Networking 7 10-14-2004 08:05 PM
what is IP tunneling? Hano Linux - Networking 1 04-23-2002 11:27 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 06:21 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration