Ssh vpn

acid_kewpie · 01-06-2010, 02:28 PM

That seems to just suggest you aren't that familiar with stateful tcp connections. If the connection is initiated form the SSH server, then the TCP response will match up and go back the way it came, as long as your firewall is statefully monitoring connections, which is a 99.999% certainty.

qwertyjjj · 01-06-2010, 02:42 PM

Quote:

Originally Posted by acid_kewpie

That seems to just suggest you aren't that familiar with stateful tcp connections. If the connection is initiated form the SSH server, then the TCP response will match up and go back the way it came, as long as your firewall is statefully monitoring connections, which is a 99.999% certainty.

But the developer's server might be expecting a request from port 17356.
If it comes in on the SSH server at port 22, how does the SSH server know that it needs to go out and come back in on 17356 especially if those ports are blocked?

Also, do I need a username password to connect to port 22?
I added the connection in ssh putty but it just hangs on connecting.

acid_kewpie · 01-06-2010, 04:34 PM

well DOES it expect a connection *FROM* port 17356?? It's technically possible, but very very very very unlikely. Why would they??

As in my previous comment, the tunnel settings define explicitly what destination ip

ort to send the traffic to.

And yes, again, you need to log in. Wouldn't it be *massively* insecure if it were possible to reroute traffic via a server which you had not authenticated to whatsoever?? You need to FULLY log in with an SSH session with those additional parameters.

qwertyjjj · 01-06-2010, 06:15 PM

Quote:

Originally Posted by acid_kewpie

well DOES it expect a connection *FROM* port 17356?? It's technically possible, but very very very very unlikely. Why would they??

As in my previous comment, the tunnel settings define explicitly what destination ip

ort to send the traffic to.

And yes, again, you need to log in. Wouldn't it be *massively* insecure if it were possible to reroute traffic via a server which you had not authenticated to whatsoever?? You need to FULLY log in with an SSH session with those additional parameters.

Ok, thanks for your patience by the way

So, I have followed this tutorial: http://www.codelathe.com/blog/index....sh-with-putty/

Now...whilst I can connect by SSH and enter a username and password, when I open up the 2nd SSH connection, it always refuses the connection.
Is there an easier way?
Could I somehow use my existing proxy server (only listening on port 80 and 8080) to tunnel all my VPN traffic through (non HTTP)?

acid_kewpie · 01-07-2010, 12:53 AM

what 2nd connection?? you use one ssh session with multiple tunnels. you can try using something like httptunnel as an alternative, sure.

qwertyjjj · 01-07-2010, 03:13 AM

Was just following that instruction page.
ANyway, I tries it using one putty connection and forwarding port 80 with tunnels set to auto and dynamic.
Made the connection and entered the linux password.
However, when I checked my IP address on Firefox, it still gave me the local IP address rather than the server.

acid_kewpie · 01-07-2010, 04:12 AM

you can't just randomly choose to use dynamic as opposed to explicitly settings ports, dynamic means it'll be a socks proxy as opposed to a simple tunnel. You didn't say you even set firefox to use that port as a socks proxy in the first place.