LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 11-22-2004, 01:02 PM   #1
mylo2003
Member
 
Registered: Jul 2003
Posts: 113

Rep: Reputation: 15
Http Tunneling


Hello, i am at work and I have figured out how to http tunnel through our firewall and login to my webserver at home...i know I should not be doing this as it is probably against my company policy and such so my use of this will be for my emergency only of course.

Anyway my question would be for all the networking folks would be the following...would there be a way i can see if they are 'logging' or detecting http tunnelling? Does such a detection exist???

Thx!
 
Old 11-22-2004, 01:11 PM   #2
bignerd
Member
 
Registered: Nov 2004
Distribution: FC1, Gentoo, Mdk 8.1, RH7-8-9, Knoppix, Zuarus rom 3.13
Posts: 98

Rep: Reputation: 15
Yes there is a way to log what you are doing.

No you can't see the logs or detect that they are doing it. They either do or don't and you won't know till they show up at your desk.

If you are using encryption on your tunnel they can only tell the end points (you and your home) of the tunnel but not what was passed or what was done. That's the point of encryption after all.

-b
 
Old 11-22-2004, 01:18 PM   #3
mylo2003
Member
 
Registered: Jul 2003
Posts: 113

Original Poster
Rep: Reputation: 15
So this is not an option for me then as i would prefer to go undected...i've heard about ssl and ssh...then again, i'm probably getting into some shady territory here...I don't want to get fired!
 
Old 11-22-2004, 02:45 PM   #4
phatboyz
Member
 
Registered: Feb 2004
Location: Mooresville NC
Distribution: CentOS 4,Free BSD,
Posts: 358

Rep: Reputation: 30
Why do you need to hide HTTP access from your company.
 
Old 11-22-2004, 03:02 PM   #5
mylo2003
Member
 
Registered: Jul 2003
Posts: 113

Original Poster
Rep: Reputation: 15
Its not that i want to 'hide' so to speak. I wouldn't be downloading mp3's or pron...i I just don't want people thinking i am using company bandwidth for personal uses.
 
Old 11-23-2004, 01:33 PM   #6
bdogg
Member
 
Registered: Sep 2004
Location: Salt Lake City, UT
Distribution: Debian Sarge
Posts: 93

Rep: Reputation: 15
You must work for a real slave-driver!

mylo2003@microsoft.com ?
 
Old 11-23-2004, 01:41 PM   #7
mylo2003
Member
 
Registered: Jul 2003
Posts: 113

Original Poster
Rep: Reputation: 15
ahahaha....yeah really.

Actually its not really that bad...i just don't want to get fired for tunnelling.
 
Old 11-23-2004, 04:00 PM   #8
AUSanders79
Member
 
Registered: Aug 2003
Location: Alabama
Distribution: Slack 10.1/FreeBSD 5.4
Posts: 37

Rep: Reputation: 15
You could always setup your SSH server at home to listen on port 80, then SSH to it over port 80 from work. That way it appears you are just surfing or something. Of course, some of the good content filters and other tools will notice those are NOT HTTP packets going over port 80 and will therefore look even more suspicious.

I say if you work in IT, just setup SSH from your machine to your home and go with it. I mean, you're in IT, do they expect you to just do work related stuff while you're there??
 
Old 11-24-2004, 08:38 AM   #9
mylo2003
Member
 
Registered: Jul 2003
Posts: 113

Original Poster
Rep: Reputation: 15
Hrm - sounds like good advice. Anybody care to save me some googling and give me some good links on how to set this up?
 
Old 11-24-2004, 08:42 AM   #10
AUSanders79
Member
 
Registered: Aug 2003
Location: Alabama
Distribution: Slack 10.1/FreeBSD 5.4
Posts: 37

Rep: Reputation: 15
Ok first let's start here:

What OS is your webserver running on?

Are you running an SSH server at home on your webserver?

If you are running SSH at home, can you currently SSH in to it from work?

Are you actually running a website from home or are you just using port 80 to tunnel information through?

And finally, just so we're all clear, what exactly are you wanting to do from your office? Log into Terminal Services or VNC, or surf your own personal website or what?
 
Old 11-24-2004, 11:59 AM   #11
mylo2003
Member
 
Registered: Jul 2003
Posts: 113

Original Poster
Rep: Reputation: 15
OK..here are the specs.

I have a redhat box at home with apache on it.

I have a windows box here at work.

I'm not sure if i have SSH running on my linux box. I can check though.

I am running a website through the apache server. It is serving up pages through port 80.

Basically yes, I want to get vncserver up and running and send information through to my PC at home also...

I know VNC needs port 5900 opened, this is another reason to use SSH i suppose...
 
Old 11-24-2004, 12:04 PM   #12
AUSanders79
Member
 
Registered: Aug 2003
Location: Alabama
Distribution: Slack 10.1/FreeBSD 5.4
Posts: 37

Rep: Reputation: 15
Quote:
Originally posted by mylo2003
OK..here are the specs.

--I have a redhat box at home with apache on it.
--I have a windows box here at work.
--I'm not sure if i have SSH running on my linux box. I can check though.
--I am running a website through the apache server. It is serving up pages through port 80.

Basically yes, I want to get vncserver up and running and send information through to my PC at home also...

I know VNC needs port 5900 opened, this is another reason to use SSH i suppose...
Also, the next question is can you SSH to your RedHat box at home from your Windows box at work? If so, we're in good shape and you can look here for how to set up VNC to tunnel through the SSH box: http://www.linuxquestions.org/questi...hreadid=258495

Just change the port that is forwarded from 3389 to 5900. Now I'm not sure cause I don't use VNC, but aren't there two ports that need to be opened? I can't remember. But the link I just referenced I think will be perfect for getting you set up to tunnel VNC or Remote Desktop to your box at home.

**Edit - To my knowledge, most all Linux installs come with SSH enabled and running.

Last edited by AUSanders79; 11-24-2004 at 12:06 PM.
 
Old 11-24-2004, 12:48 PM   #13
mylo2003
Member
 
Registered: Jul 2003
Posts: 113

Original Poster
Rep: Reputation: 15
OK - so if I have SSH enabled on my linux box at home, i can ssh into it from my work win32 PC through the browser? Do i need some ssh client or anything or does SSH work through the browser???

Thx for all your help btw...
 
Old 11-24-2004, 12:48 PM   #14
gauge73
Member
 
Registered: Jan 2003
Location: Dallas, TX
Distribution: Fedora Core 4
Posts: 420

Rep: Reputation: 30
I also would like to have encrypted internet access through my home Linux machine. I can SSH in and surf from there, but it's too slow. Is there any way I can just somehow have the HTTP traffic go through an SSH tunnel and use the browser on my local machine at work?
 
Old 11-24-2004, 01:07 PM   #15
AUSanders79
Member
 
Registered: Aug 2003
Location: Alabama
Distribution: Slack 10.1/FreeBSD 5.4
Posts: 37

Rep: Reputation: 15
Ok, so let's see....

Mylo: You will need an SSH client on your machine at work. Most popular is PuTTY. Google to find it. That will give you shell access to your SSH server which is running on your Linux box. To get VNC tunneled over SSH or Remote Desktop, you have to configure port forwarding for your PuTTY connection. You will not be doing any of this through the browser at all. Tell me again what your end goal is? You just want to VNC into a Windows box on your internal LAN at home right? If so, why not use Remote Desktop tunneled over VNC?

Gauge: That sounds like you would need to set up a linux box at your house as a proxy and then you could forward all web requests (port 80) to your Proxy through SSH and it could fetch your pages. The need for SSH is necessary so that the plaintext web requests would not be readable by your corporate watchdogs that might be watching traffic on your company network. If that's not an issue then no SSH is necessary and you just set up a proxy server at your home linux machine and setup your browser at work to use that proxy.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
http proxy tunneling xowl Linux - Networking 1 02-22-2005 12:41 PM
HTTP tunneling NNP Linux - Networking 2 11-18-2004 07:35 AM
Http Tunneling without CONNECT pymehta Linux - Networking 0 07-13-2004 03:35 PM
http-tunneling and icq saavik Linux - Security 0 03-02-2002 01:33 AM
http tunneling ngo Linux - Networking 0 10-02-2001 10:24 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 07:02 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration