Port Forwarding via SSH - Was: Re: [H-GEN] Static Routing

Mark Suter suter at zwitterion.humbug.org.au
Thu Apr 29 09:43:53 EDT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David,

> I've just been fiddling with ssh'ing to a box that sits on a secure LAN and 
> has access to an intranet. Is there a way I could use ssh forwarding to allow 
> me to browse the intranet at that site from my home machine via ssh?

With the permission of those administering your network, two
options spring to mind:

    1) Create a SOCKS4/5 proxy with ssh.  You'll need to use
       libsocks or something like it, but almost everything will
       "just work" as if you had network access.

	ssh -D 1080 user at host.example.com
	http://www.socks.permeo.com/AboutSOCKS/SOCKSOverview.asp
	http://www.ietf.org/rfc/rfc1928

    2) Forward a port to a http proxy (squid, etc).  This might be
       easier to do but it will only work applications that use a
       http proxy (web browser, wget, etc)

	ssh -L 3128:localhost:3128 user at proxy.example.com

Yours sincerely,

- -- Mark John Suter  | I know that you  believe  you understand
suter at humbug.org.au | what you think I said, but I am not sure
gpg key id 2C71D63D | you realise that what you  heard  is not
mobile 0411 262 316 | what I meant.        Robert J. McCloskey
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Check Keyservers or http://zwitterion.org/keys/

iD8DBQFAkQaYRYso2ixx1j0RArdBAJ9A8AeeKECVapuhbMKkG7n2o4HYJwCfbglG
jOc+ugLTuQNpijfO9IUt9/k=
=gHNA
-----END PGP SIGNATURE-----




More information about the General mailing list