LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-10-2015, 01:49 PM   #1
D.wyatt1
LQ Newbie
 
Registered: Oct 2015
Posts: 16

Rep: Reputation: Disabled
Can I encrypt web traffic with a local ssh server?


hi

I want to encrypt my web traffic with ssh, but I don't have access to a remote ssh sever.

I do have a local ssh server running on my machine and I want to know if I can use my local ssh sever to encrypt my web traffic. I know it sounds odd, but I want to know if it's effective or not.

Thanks
 
Old 10-10-2015, 01:57 PM   #2
Rinndalir
Member
 
Registered: Sep 2015
Posts: 733

Rep: Reputation: Disabled
Yes, it is possible.
 
Old 10-10-2015, 03:34 PM   #3
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
Erm, encrypt it between where and where? From whom are you trying to hide things?
The answer to your question is "no" since SSH encrypts traffic between a client and a server once the traffic leaves your network it is no longer encrypted.
 
Old 10-11-2015, 01:57 PM   #4
D.wyatt1
LQ Newbie
 
Registered: Oct 2015
Posts: 16

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by 273 View Post
Erm, encrypt it between where and where? From whom are you trying to hide things?
No, I'm not hiding things. I just want to protect my privacy when surfing on a public wifi network. Encryption is a good thing to use because public wifi's aren't secure i.e possible man-in-the-middle sniffing insecure wifi traffic.

Anyway, after reading online about ssh forwarding, the best approach is to use a remote ssh server or a VPS. I do understand my encryption is encrypted from my client machine to the ssh server/VPS and that's fine for me as this would protect me from the man-in-the-middle attacks on a public wifi.

I've learned that ssh works by making an encrypted tunnel from the client machine to the remote server and then it unencrypts from remote server to the internet.

So the local ssh server method which I was going to use wouldn't be effective because it will come out of my client machine unencrypted.

I decided to use digital ocean as my VPS for $5 bucks a month and it's worth it to have when using a public wifi.

PS: I was looking at VPN services as well. But many don't support linux unless you have to do some work-a-rounds. The client apps are mostly for windows, IOS and android.

Last edited by D.wyatt1; 10-11-2015 at 02:29 PM.
 
Old 10-11-2015, 02:17 PM   #5
frieza
Senior Member
 
Registered: Feb 2002
Location: harvard, il
Distribution: Ubuntu 11.4,DD-WRT micro plus ssh,lfs-6.6,Fedora 15,Fedora 16
Posts: 3,233

Rep: Reputation: 406Reputation: 406Reputation: 406Reputation: 406Reputation: 406
there is logmein hamachi that has a linux client, and you can create a free VPN for up to 5 nodes

mind you the linux client is command line only, but it's pretty straight forward and is pretty robust, i've only run into a couple of circumstances where hamachi didn't work, and it was in a circumstance where using hamachi might have been a violation of the TOU (terms of use) anyhow, such as at my school.
 
Old 10-11-2015, 02:39 PM   #6
D.wyatt1
LQ Newbie
 
Registered: Oct 2015
Posts: 16

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by frieza View Post
there is logmein hamachi that has a linux client, and you can create a free VPN for up to 5 nodes
Since you didn't provide a link, I did a google search on it. Is this the right link or site.
https://secure.logmein.com/welcome/h.../whatsnew.aspx

BTW, on my online research on ssh forwarding, I found an article about this cool program called sshuttle. It simulates a VPN using ssh.

http://www.linuxjournal.com/content/...afely-sshuttle
 
Old 10-11-2015, 06:45 PM   #7
frieza
Senior Member
 
Registered: Feb 2002
Location: harvard, il
Distribution: Ubuntu 11.4,DD-WRT micro plus ssh,lfs-6.6,Fedora 15,Fedora 16
Posts: 3,233

Rep: Reputation: 406Reputation: 406Reputation: 406Reputation: 406Reputation: 406
Quote:
Originally Posted by D.wyatt1 View Post
Since you didn't provide a link, I did a google search on it. Is this the right link or site.
https://secure.logmein.com/welcome/h.../whatsnew.aspx

BTW, on my online research on ssh forwarding, I found an article about this cool program called sshuttle. It simulates a VPN using ssh.

http://www.linuxjournal.com/content/...afely-sshuttle
oh, sorry... my bad

https://secure.logmein.com/labs/ the linux client is found here, and you will need to create a logmein account (free), and then create a network (free)

note, the 'client' gets run at both ends, and it creates an extra network interface with it's own set of IP addresses.

Last edited by frieza; 10-11-2015 at 06:46 PM.
 
Old 10-11-2015, 10:31 PM   #8
D.wyatt1
LQ Newbie
 
Registered: Oct 2015
Posts: 16

Original Poster
Rep: Reputation: Disabled
I appreciate the link for the linux program. Thanks

Logmein Hamachi looks interesting and an easy way to access other computers running hamachi securely over the internet.

However, to do web surfing securely on a public wifi, I need more than hamachi. I need to install a proxy server like squid or privoxy to use in conjunction with hamachi. I found an article on how to do this. It looks easy and doable.

http://lifehacker.com/5763170/how-to...hi-and-privoxy

Since hamachi has an arm version of hamachi as well, this would be a good project for an arm based computer like a raspberry PI to make a secure VPN with hamachi and privoxy or other proxy software.

Last edited by D.wyatt1; 10-11-2015 at 10:32 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Help with Ubuntu server remote ssh and local network ssh issues using putty. scottpops Linux - Server 8 05-17-2012 05:07 PM
Cant make web server run my local web page... Nik0s Linux - Newbie 22 10-08-2006 10:30 PM
Apache is redirecting web traffic to local domain drkstr Slackware 6 06-05-2006 09:16 AM
X11 Tunneling and Web traffic from local Machine anon111 Linux - Networking 2 01-30-2006 09:13 AM
Local webserver -- How to deny all client install their local web server--Please help b:z Linux - Networking 13 04-16-2005 07:11 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:12 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration