LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 09-20-2007, 05:47 PM   #1
iAlta
Member
 
Registered: Oct 2005
Distribution: Ubuntu 7.10, OpenSUSE 10.3, Linux Mint, Arch
Posts: 92

Rep: Reputation: 15
Will I have any problems with ssh in this setup?


I have a simple question, I'm gonna buy a new laptop tomorrow that I'm mostly gonna use in my school, I was wondering if I will have any problems with this ssh setup?

pc@home <-> firewall <-> internet <-> firewall <-> proxyserver <-> laptop@school


are there any potential problems I may run into, like router configuration? Is it possible to fx. run ssh through port 80, if the standard ssh port is blocked by the school's server?

And yes, this will be my first time using ssh...
 
Old 09-20-2007, 05:53 PM   #2
dxqcanada
Member
 
Registered: Sep 2006
Location: Canada
Distribution: Gentoo
Posts: 702

Rep: Reputation: 43
I assume that your Home PC is the SSH Server ... and the laptop is the SSH Client ?

First ... the Proxy Server may not service SSH.

Second ... if the Proxy Server does allow SSH outbound ... the school Firewall may not permit outgoing SSH connections.

Third ... your home router must be able to forward SSH connections to your Home PC as most likely it is configured for NAT.
 
Old 09-20-2007, 09:41 PM   #3
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Before attempting this, please make sure that you aren't violating some school policy by opening an SSH connection to your house. I know for a fact my school doesn't care about this kind of stuff, but some schools do. So make sure, and don't do it if it is not allowed.

That said, yes, you can make your SSH daemon at home listen on any port you want. You would almost certainly be able to SSH at least to port 80 or 443 without any problems (unless your home ISP is blocking those ports - some home ISPs do this to prevent people from having web servers), if all the school had was a typical consumer-grade router.

First, check if you can SSH to port 443. Even when implementing transparent/intercepting proxies, it is not unusual for network admins to SNAT port 443. If it doesn't work, it would indicate the port isn't being SNATed, and instead HTTPS requests are going through the proxy, using the CONNECT method. Hence, you'd need to use a tool such as corkscrew, which would let you tunnel through the proxy.

If your school has implemented a whitelist on the proxy, then you are out of luck regarding the help you could get here. This is because bypassing a whitelist would be considered cracking, and helping you with that would violate the LQ Rules. I'm allowing this thread because, technically speaking, you aren't cracking anything by simply opening an SSH connection to home.

Last edited by win32sux; 09-20-2007 at 09:50 PM.
 
Old 09-21-2007, 03:28 AM   #4
iAlta
Member
 
Registered: Oct 2005
Distribution: Ubuntu 7.10, OpenSUSE 10.3, Linux Mint, Arch
Posts: 92

Original Poster
Rep: Reputation: 15
Yes, Hom PC is the server, and laptop is the client.
I was kinda worried about the proxy server... Hope it works. Home router shouldn't be a problem, but I don't know about the ISP, though...

I doubt my school has any sort of policy, it's a small school, 9 or 10 classes in total.
All the IT work is being out coursed to a local IT firm. I'm not sure about an a whitelist, not quite sure what a whitelist would list, but I defenetly don't want to do any cracking, I just want to be able to get to my homework if I left it at home...

Speaking of which, if I left my laptop at home, could I also configure it as a server too and use a win32 ssh app on maybe a usb-stick, and use a classmates computer to connect to the laptop? Is that at all possible?
 
Old 09-21-2007, 03:53 AM   #5
Gethyn
Member
 
Registered: Aug 2003
Location: UK
Distribution: (X)Ubuntu 10.04/10.10, Debian 5, CentOS 5
Posts: 900

Rep: Reputation: 32
There are a number of ssh implementations available for Windows, try looking up putty and puttysftp.
 
Old 09-21-2007, 10:04 AM   #6
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by iAlta View Post
I'm not sure about an a whitelist, not quite sure what a whitelist would list, but I defenetly don't want to do any cracking, I just want to be able to get to my homework if I left it at home...
When schools implement a whitelist, it is usually to restrict access only to educational-type websites. From what I've seen in the schools I've been in, blacklists are more popular (sometimes combined with a porn filter), because they just wanna ban stuff like YouTube, etc.

Quote:
Speaking of which, if I left my laptop at home, could I also configure it as a server too and use a win32 ssh app on maybe a usb-stick, and use a classmates computer to connect to the laptop? Is that at all possible?
Sure, no problem. Make sure it's a friend you trust, though. Don't let yourself be a keylogger victim. Maybe carry a Live CD or Live USB distro so you could boot that instead. Just a thought.

Last edited by win32sux; 09-21-2007 at 10:52 AM.
 
Old 09-21-2007, 10:32 AM   #7
iAlta
Member
 
Registered: Oct 2005
Distribution: Ubuntu 7.10, OpenSUSE 10.3, Linux Mint, Arch
Posts: 92

Original Poster
Rep: Reputation: 15
Well, youtube doesn't work... Haven't tried porn, though...

I've tired to get DSL on a USB dirve, but it didn't work then, but I'll try again..

I'll get back to ya' when I've tried it out, probably will be Tuesday(laptop's delayed, refused to buy Vista).
 
Old 09-21-2007, 10:52 AM   #8
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Cool. Good luck.
 
Old 09-21-2007, 11:10 AM   #9
unixfool
Member
 
Registered: May 2005
Location: Northern VA
Distribution: Slackware, Ubuntu, FreeBSD, OpenBSD, OS X
Posts: 782
Blog Entries: 8

Rep: Reputation: 158Reputation: 158
Quote:
Originally Posted by iAlta View Post
Well, youtube doesn't work... Haven't tried porn, though...
Hehehe...good luck, and be careful.
 
Old 11-05-2007, 02:24 PM   #10
iAlta
Member
 
Registered: Oct 2005
Distribution: Ubuntu 7.10, OpenSUSE 10.3, Linux Mint, Arch
Posts: 92

Original Poster
Rep: Reputation: 15
Resurected!

It took more time than expected to get that laptop, and even longer to get it working properly.

The setup is something like this:
Server: Ubuntu 7.10 -> router -> Internet
Client: OpenSUSE 10.3 -> Proxy(win) -> router -> Internet

I have installed the openssh server on ubuntu, and openSUSE has ssh installed by default, I have generated a key pair in both cases, but I now have no idea what to do next.
 
Old 11-05-2007, 05:35 PM   #11
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by iAlta View Post
I have installed the openssh server on ubuntu, and openSUSE has ssh installed by default, I have generated a key pair in both cases, but I now have no idea what to do next.
Forward port 443 to your SSH daemon. Try to SSH to port 443.
Quote:
Originally Posted by win32sux View Post
First, check if you can SSH to port 443.
 
Old 11-06-2007, 10:56 AM   #12
iAlta
Member
 
Registered: Oct 2005
Distribution: Ubuntu 7.10, OpenSUSE 10.3, Linux Mint, Arch
Posts: 92

Original Poster
Rep: Reputation: 15
heh, ehm, how do I do that exactly...
configure the router to forward connections from 443 to the ssh daemon? do I need a static ip for that?
I'd like to first get it working, and testing it locally, both client and server behind the same router.
 
Old 11-06-2007, 12:21 PM   #13
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by iAlta View Post
configure the router to forward connections from 443 to the ssh daemon?
Yes.

Quote:
do I need a static ip for that?
No. Lots of routers offer dynamic DNS functionality. For example, I have my Linksys WRT54G working with DynDNS.com (or is it No-IP.com?). This way you don't need to remember the IP - you SSH to example.example.net instead.

Quote:
I'd like to first get it working, and testing it locally, both client and server behind the same router.
Just SSH to the server's private IP on the LAN and see if it works. BTW, what brand/model router do you have?

Last edited by win32sux; 11-06-2007 at 12:23 PM.
 
Old 11-06-2007, 01:20 PM   #14
iAlta
Member
 
Registered: Oct 2005
Distribution: Ubuntu 7.10, OpenSUSE 10.3, Linux Mint, Arch
Posts: 92

Original Poster
Rep: Reputation: 15
The router is a billion-something, it's mounted stuck on the wall, so I can't really see what it says, on the top, though, it says Billion Wireless-G ADSL router. It's probably 5200G, as that's what the advertised on the ISP's site, which is where is was bought.

ssh to the server doesn't.
 
Old 11-06-2007, 01:55 PM   #15
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
What IP does the server have? What IP does your laptop have? What error message do you get?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
how to setup domain via SSH File.am Linux - Newbie 1 06-06-2007 08:16 AM
Trying to setup up SSH ice1000 Linux - Networking 8 02-23-2005 09:17 PM
Setup SSH? zigmund555 Slackware 2 02-13-2004 01:06 PM
SSH Setup Gramo Linux - General 3 07-15-2003 07:06 PM
How to setup SSH... Graanco Linux - Newbie 2 06-10-2001 04:03 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:08 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration