LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-30-2004, 11:45 AM   #1
daviddst
LQ Newbie
 
Registered: Aug 2004
Posts: 1

Rep: Reputation: 0
SSL tunnel with transparent proxy


I try to build an SSL connexion accross a transparent proxy in order to establish an SSH connexion.

It's an application firewall.

Connexion to SSL sites are allowed. This is no proxy proxy settings on browsers.

I've tried to use stunnel+bouncer, but the problem is there is no real HTTP proxy.

This my configuration on client :

-- Bouncer
bouncer --port 443 --destination myhome:443 --tunnel myhome:80

-- Stunnel
CAfile=cacert.pem
cert=keycert.pem
client=yes
verify=2
[ssh]
accept=127.0.0.1:22
connect=127.0.0.1:443

Stunnel listen on port 443 on myhome.

Client stunnel log :

2004.08.30 17:14:34 LOG3[4076:1952]: SSL_connect: Peer suddenly disconnected
2004.08.30 17:18:00 LOG5[4076:1184]: ssh connected from 127.0.0.1:3323

Client bouncer log :

Bouncer v1.0.RC6 (MileStone)
Build Date: Apr 25 2002 21:18:15
Copyright (c) 2002 Chris Mason
All Rights Reserved

[17:28.12] Waiting For TCP Connections On 0.0.0.0:443
[17:28.15] [1] Accepted Connection From 127.0.0.1:3399
[17:28.15] [1] Querying DNS For Hostname Myho;e
[17:28.15] [1] Attempting To Connect To myip80
[17:28.16] [1] Successfully Connected To myip:80
[17:28.16] [1] SSL Tunnelling To myhome:443
[17:28.16] [1] SSL Tunnelling Failed (500: Internal Server Error)
[17:28.16] [1] Connection Closed

Any ideas ?
 
Old 09-04-2004, 03:22 PM   #2
gvec
Member
 
Registered: Aug 2004
Posts: 32

Rep: Reputation: 15
i had the need to use :443 for establishing a connection to my home pc through my work proxy/firewall. i was able to do so through the use of ProxyTunnel. once installed, i added a config file for use with ssh

~/.ssh/config

in the file 'config' is where you will place your needed information for ssh to use proxytunnel.
something like this
Code:
host myhome
ProxyCommand /usr/bin/proxytunnel -g proxy -G 80 -d myhome.com -D 443
unfortunately i have only used proxytunnel with an authenticating cache proxy of which my config looks like
Code:
host myhome
ProxyCommand /usr/bin/proxytunnel -g proxy -G 80 -u <username> -s <password> -d myhome.here.com -D 443
then to establish the connection
Code:
ssh -l <name of user at myhome> <any port forwards/reverses> myhome
on myhome, i configured the sshd to listen on port 443 as well as 22 for incoming connections


hope this helps...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to transparent proxy depam Linux - Software 3 12-30-2005 12:33 PM
Transparent Proxy krock923 Linux - Networking 1 04-28-2005 06:43 PM
Transparent Proxy ilnli Linux - Networking 3 10-18-2004 06:01 PM
game proxy ? udp forwarding ? tunnel ? n33dH3lp Linux - Networking 1 11-10-2003 12:13 PM
Mozilla 1.4 HTTPS SSL Tunnel Proxy Problem Ynog Linux - Software 0 07-30-2003 09:19 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:42 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration