SSH and Putty...

Linux~Powered · 06-15-2006, 02:08 PM

I'm trying so SSH from work to home with Putty. My work place pretty much restricts every thing through a proxy server only letting 80 and 443 through. As of now I have my Linux box listening on port 443 so I can tunnel through the proxy server. When I run Putty I put my ipaddress in on port 443, then I go to the proxy part and put in HTTP proxy2 on port 443 but I still cant connect it just hangs. Am I doing this wrong or is there another way to accomplish this.

Edit: It's not my firewall or router either.

cachemonet · 06-15-2006, 02:20 PM

Since you are restricted to outbound 80 (443) at work, you need to force your firewall to listen to 80 (or 443) and forward to 22 on the ip of your PC. I can not get more specific until I have more information about your firewall.

Linux~Powered · 06-15-2006, 02:30 PM

Quote:

you need to force your firewall to listen to 80 (or 443) and forward to 22 on the ip of your PC.

My firewall is letting 443 through. So you're saying once the packets get through my firewall on 443 I need to forward them back to my work box on port 22?

In my firewall I have the following for SSH...

Default's are:

INPUT DROP
OUTPUT ACCEPT
FORWARD DROP

iptables -A INPUT -p tcp -d 0/0 -s 0/0 --dport 443 -j LOG_ACCEPT_SSH
iptables -A INPUT -p tcp -d 0/0 -s 0/0 --dport 443 -j ACCEPT

osor · 06-15-2006, 02:37 PM

Quote:

Originally Posted by Linux~Powered

My firewall is letting 443 through. So you're saying once the packets get through my firewall on 443 I need to forward them back to my work box on port 22?

In my firewall I have the following for SSH...

Default's are:

INPUT DROP
OUTPUT ACCEPT
FORWARD DROP

iptables -A INPUT -p tcp -d 0/0 -s 0/0 --dport 443 -j LOG_ACCEPT_SSH
iptables -A INPUT -p tcp -d 0/0 -s 0/0 --dport 443 -j ACCEPT

It depends on what port your server is allowed to listen to. What are the iptables rules for the box containing the server? To be sure it's not a problem with the route, try doing a test without ssh (i.e., setup netcat to listen on 443 on your box. then use netcat from your other box with the destination of port 443. See if you can talk to each other).

cachemonet · 06-15-2006, 02:50 PM

Do you have a dedicated firewall before the ssh server?

On the ssh server type cat /etc/ssh/sshd_config | grep -i port