LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   SSH and Putty... (https://www.linuxquestions.org/questions/linux-security-4/ssh-and-putty-455123/)

Linux~Powered 06-15-2006 02:08 PM

SSH and Putty...
 
I'm trying so SSH from work to home with Putty. My work place pretty much restricts every thing through a proxy server only letting 80 and 443 through. As of now I have my Linux box listening on port 443 so I can tunnel through the proxy server. When I run Putty I put my ipaddress in on port 443, then I go to the proxy part and put in HTTP proxy2 on port 443 but I still cant connect it just hangs. Am I doing this wrong or is there another way to accomplish this.

Edit: It's not my firewall or router either.

cachemonet 06-15-2006 02:20 PM

Since you are restricted to outbound 80 (443) at work, you need to force your firewall to listen to 80 (or 443) and forward to 22 on the ip of your PC. I can not get more specific until I have more information about your firewall.

Linux~Powered 06-15-2006 02:30 PM

Quote:

you need to force your firewall to listen to 80 (or 443) and forward to 22 on the ip of your PC.
My firewall is letting 443 through. So you're saying once the packets get through my firewall on 443 I need to forward them back to my work box on port 22?

In my firewall I have the following for SSH...

Default's are:

INPUT DROP
OUTPUT ACCEPT
FORWARD DROP

iptables -A INPUT -p tcp -d 0/0 -s 0/0 --dport 443 -j LOG_ACCEPT_SSH
iptables -A INPUT -p tcp -d 0/0 -s 0/0 --dport 443 -j ACCEPT

osor 06-15-2006 02:37 PM

Quote:

Originally Posted by Linux~Powered
My firewall is letting 443 through. So you're saying once the packets get through my firewall on 443 I need to forward them back to my work box on port 22?

In my firewall I have the following for SSH...

Default's are:

INPUT DROP
OUTPUT ACCEPT
FORWARD DROP

iptables -A INPUT -p tcp -d 0/0 -s 0/0 --dport 443 -j LOG_ACCEPT_SSH
iptables -A INPUT -p tcp -d 0/0 -s 0/0 --dport 443 -j ACCEPT

It depends on what port your server is allowed to listen to. What are the iptables rules for the box containing the server? To be sure it's not a problem with the route, try doing a test without ssh (i.e., setup netcat to listen on 443 on your box. then use netcat from your other box with the destination of port 443. See if you can talk to each other).

cachemonet 06-15-2006 02:50 PM

Do you have a dedicated firewall before the ssh server?

On the ssh server type cat /etc/ssh/sshd_config | grep -i port


All times are GMT -5. The time now is 12:51 PM.