Comments on: How to Tunnel Web Traffic with SSH Secure Shell http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/ Cool Websites, Software and Internet Tips Tue, 24 Nov 2009 14:36:17 -0500 http://wordpress.org/?v=2.8.4 hourly 1 By: Encryption Software http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-414780 Encryption Software Tue, 27 Oct 2009 22:14:01 +0000 http://www.makeuseof.com/?p=13548#comment-414780 As noted, Port Forwarding is a different beast altogether. Think of it as poking singular holes in your firewall for singular apps to make their way through. As noted, Port Forwarding is a different beast altogether. Think of it as poking singular holes in your firewall for singular apps to make their way through.

]]> By: Jorge Sierra http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-412674 Jorge Sierra Mon, 19 Oct 2009 17:48:38 +0000 http://www.makeuseof.com/?p=13548#comment-412674 It's not the same as port forwarding, although port forwarding may be necessary to do it. <strong>Port forwarding</strong> typically takes place with a firewall/router that has a machine behind it. That machine is running some kind of server that you want to allow access from outside of the firewall. <strong>Tunneling</strong> allows you to send (relatively) arbitrary traffic through an SSH server into a client. Essentially, the SSH server becomes a proxy for the client, and encrypted data is transmitted between the server and client, so it is safe and secure. The data being retrieved by the server for the client may or may not be secure/encrypted. Fundamentally speaking, it is as though the client is actually on the server requesting data. So if you use SSH tunneling as a proxy to surf the web, it is just as safe/secure as if you were on the server surfing the web. It’s not the same as port forwarding, although port forwarding may be necessary to do it.

Port forwarding typically takes place with a firewall/router that has a machine behind it. That machine is running some kind of server that you want to allow access from outside of the firewall.

Tunneling allows you to send (relatively) arbitrary traffic through an SSH server into a client. Essentially, the SSH server becomes a proxy for the client, and encrypted data is transmitted between the server and client, so it is safe and secure. The data being retrieved by the server for the client may or may not be secure/encrypted.

Fundamentally speaking, it is as though the client is actually on the server requesting data. So if you use SSH tunneling as a proxy to surf the web, it is just as safe/secure as if you were on the server surfing the web.

]]> By: sem http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-412635 sem Mon, 19 Oct 2009 14:35:40 +0000 http://www.makeuseof.com/?p=13548#comment-412635 Is this tunneling the same as port forwarding? I am a little unfamiliar on this topic. How safe and secure is this? Is this tunneling the same as port forwarding? I am a little unfamiliar on this topic. How safe and secure is this?

]]> By: Jorge Sierra http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-393851 Jorge Sierra Wed, 15 Jul 2009 13:16:28 +0000 http://www.makeuseof.com/?p=13548#comment-393851 I'm afraid I don't understand the question. What do you mean when you say a server to pass your encrypted ssh data to? SSH already performs the function of passing encrypted data between the SSH client and server. The tunnels are used to pass through any kind of TCP traffic on the specified port(s). I’m afraid I don’t understand the question. What do you mean when you say a server to pass your encrypted ssh data to? SSH already performs the function of passing encrypted data between the SSH client and server. The tunnels are used to pass through any kind of TCP traffic on the specified port(s).

]]> By: David http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-393799 David Wed, 15 Jul 2009 05:03:20 +0000 http://www.makeuseof.com/?p=13548#comment-393799 Hey i'm familiar with ssh tunneling but i don't have or know any servers to pass my encrypted ssh data to.I googled about ssh proxy servers but all i got was crap.Does anyone know a good ssh proxy server that can handle my traffic ? Thanks Hey i’m familiar with ssh tunneling but i don’t have or know any servers to pass my encrypted ssh data to.I googled about ssh proxy servers but all i got was crap.Does anyone know a good ssh proxy server that can handle my traffic ?

Thanks

]]> By: remote desktop software http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-390008 remote desktop software Wed, 17 Jun 2009 14:34:14 +0000 http://www.makeuseof.com/?p=13548#comment-390008 Basically SSH is very useful if you’re used to linux shell command. What I always do is for my upload, I normally create a tar ball (.tar.gz) and upload using sftp, then login using SSH to unpack it. Anyway some cpanel allows the unpack from the cpanel itself Basically SSH is very useful if you’re used to linux shell command. What I always do is for my upload, I normally create a tar ball (.tar.gz) and upload using sftp, then login using SSH to unpack it. Anyway some cpanel allows the unpack from the cpanel itself

]]> By: Jorge Sierra http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-384558 Jorge Sierra Thu, 30 Apr 2009 12:33:20 +0000 http://www.makeuseof.com/?p=13548#comment-384558 That's exactly right. Make sure that port 22 on your Linux box is accessible from wherever you're going to be connecting with Putty. Then just connect Putty w/ the VNC tunnel configured properly, launch the VNC client, and connect the VNC client to localhost. That’s exactly right. Make sure that port 22 on your Linux box is accessible from wherever you’re going to be connecting with Putty. Then just connect Putty w/ the VNC tunnel configured properly, launch the VNC client, and connect the VNC client to localhost.

]]> By: Jon http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-384473 Jon Wed, 29 Apr 2009 19:18:19 +0000 http://www.makeuseof.com/?p=13548#comment-384473 Ok... I might be heading in the wrong direction with this. I want to have a secure remote desktop connection to a linux box at home. I have a windows laptop with putty installed. The SSH server is already installed and configured so that I can SSH into my server from putty. Is tunneling VNC the way to go and if so would I just use localhost for all the destinations since its on the same computer? Ok… I might be heading in the wrong direction with this. I want to have a secure remote desktop connection to a linux box at home. I have a windows laptop with putty installed. The SSH server is already installed and configured so that I can SSH into my server from putty. Is tunneling VNC the way to go and if so would I just use localhost for all the destinations since its on the same computer?

]]> By: Jorge Sierra http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-384426 Jorge Sierra Wed, 29 Apr 2009 11:32:26 +0000 http://www.makeuseof.com/?p=13548#comment-384426 Tunneling games directly through an SSH tunnel may be possible (as long as it TCP only, and not UDP traffic), but it is definitely a much more complicated process. Probably your best bet is to use a program that will allow you to tunnel traffic from a program through a SOCKS proxy. Scott mentioned <a href="http://www.proxifier.com/" rel="nofollow">Proxifier</a> in the first comment on the article. You can try it out with the 31-day free trial. There is one free program called <a href="http://freecap.ru/eng/?p=index" rel="nofollow">FreeCap</a>. I've used it in the past and had some luck with some programs, but not all. Tunneling games directly through an SSH tunnel may be possible (as long as it TCP only, and not UDP traffic), but it is definitely a much more complicated process. Probably your best bet is to use a program that will allow you to tunnel traffic from a program through a SOCKS proxy.

Scott mentioned Proxifier in the first comment on the article. You can try it out with the 31-day free trial. There is one free program called FreeCap. I’ve used it in the past and had some luck with some programs, but not all.

]]> By: Paul Gowers http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-384415 Paul Gowers Wed, 29 Apr 2009 08:40:06 +0000 http://www.makeuseof.com/?p=13548#comment-384415 Hey Jorge, great, easy to follow article. Just set up my first SSH tunnel from laptop at home to client following your instructions and now running Firefox over it. Thanks a million! Cheers Paul Hey Jorge, great, easy to follow article. Just set up my first SSH tunnel from laptop at home to client following your instructions and now running Firefox over it. Thanks a million!
Cheers
Paul

]]> By: Nicodareus http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-384372 Nicodareus Tue, 28 Apr 2009 22:11:23 +0000 http://www.makeuseof.com/?p=13548#comment-384372 Heh. I stumbled across this while trying to figure out how to tunnel WoW and EQII through to my personal computer at home. It sort of helped me make sense of a few things, but doesn't really help me out much in the long run. Basically, I'm at work. And while I have full permission to play these games (And watch TV.. And.. Well.. Sleep for that matter.) there are firewalls in the way as one would expect. I can use my own connection and play just fine, but their satellite internet is about 800x better than my cellular internet. Really, it's not even worth trying to play on my little cell card here 40 miles from anywhere. I've done alot of reading and know there is a way to set up SOME sort of tunneling to handle this for me, but it all seems really intimidating and complex. Probably moreso than it really is. Any advice or perhaps a link to a 'Network tunneling for dummies' article would be appreciated. n.n Heh. I stumbled across this while trying to figure out how to tunnel WoW and EQII through to my personal computer at home. It sort of helped me make sense of a few things, but doesn’t really help me out much in the long run. Basically, I’m at work. And while I have full permission to play these games (And watch TV.. And.. Well.. Sleep for that matter.) there are firewalls in the way as one would expect. I can use my own connection and play just fine, but their satellite internet is about 800x better than my cellular internet. Really, it’s not even worth trying to play on my little cell card here 40 miles from anywhere.

I’ve done alot of reading and know there is a way to set up SOME sort of tunneling to handle this for me, but it all seems really intimidating and complex. Probably moreso than it really is. Any advice or perhaps a link to a ‘Network tunneling for dummies’ article would be appreciated. n.n

]]> By: Jorge Sierra http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-384296 Jorge Sierra Tue, 28 Apr 2009 10:46:06 +0000 http://www.makeuseof.com/?p=13548#comment-384296 VNC is a great application for tunneling through SSH. The setup is very much the same as it is for Remote Desktop, however, instead of forwarding port 3389, you would forward port 5900. Let's say the machine you want to tunnel to is at IP 192.168.1.20 and VNC is running on port 5900. The local tunnel you would set up would need to be directed to 192.168.1.20:5900 and you could use 5900 as the local port. Once you make the SSH connection with the port forward, you bring up the VNC client, and connect it to localhost:5900. SSH will redirect the traffic to the correct machine. VNC is a great application for tunneling through SSH. The setup is very much the same as it is for Remote Desktop, however, instead of forwarding port 3389, you would forward port 5900.

Let’s say the machine you want to tunnel to is at IP 192.168.1.20 and VNC is running on port 5900. The local tunnel you would set up would need to be directed to 192.168.1.20:5900 and you could use 5900 as the local port. Once you make the SSH connection with the port forward, you bring up the VNC client, and connect it to localhost:5900. SSH will redirect the traffic to the correct machine.

]]> By: Jon http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-384260 Jon Tue, 28 Apr 2009 04:16:38 +0000 http://www.makeuseof.com/?p=13548#comment-384260 Looks really useful, but I'm kinda new so not entirely sure how to use it yet. Could somebody point me in the right direction for tunneling VNC through SSH. Looks really useful, but I’m kinda new so not entirely sure how to use it yet. Could somebody point me in the right direction for tunneling VNC through SSH.

]]> By: Josh http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-380232 Josh Mon, 23 Mar 2009 17:09:18 +0000 http://www.makeuseof.com/?p=13548#comment-380232 There are a few different ways to do this, actually, and if you have a Mac, you can even create (very easily) your own application to do it for you. Step-by-step tutorial on how to do it here: http://www.corruptionoflol.com/?p=58 There are a few different ways to do this, actually, and if you have a Mac, you can even create (very easily) your own application to do it for you.

Step-by-step tutorial on how to do it here:

http://www.corruptionoflol.com/?p=58

]]> By: Jorge Sierra http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-378325 Jorge Sierra Mon, 09 Mar 2009 19:40:16 +0000 http://www.makeuseof.com/?p=13548#comment-378325 I'm not sure, that's a very good question that I've wondered about that myself. I would suspect that a good network traffic analyzer would be able to distinguish SSH packets, even if they are running on something other than port 22, but I don't know for sure. I’m not sure, that’s a very good question that I’ve wondered about that myself. I would suspect that a good network traffic analyzer would be able to distinguish SSH packets, even if they are running on something other than port 22, but I don’t know for sure.

]]> By: Francois http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-378320 Francois Mon, 09 Mar 2009 19:05:42 +0000 http://www.makeuseof.com/?p=13548#comment-378320 Excellent article! Unfortunately, this type of tunneling is often used to by pass firewalls in corporate environment. Are you aware if SSH traffic can be distinguished from other type of traffic out there so to be blocked? Excellent article! Unfortunately, this type of tunneling is often used to by pass firewalls in corporate environment. Are you aware if SSH traffic can be distinguished from other type of traffic out there so to be blocked?

]]> By: Jorge Sierra http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-378274 Jorge Sierra Mon, 09 Mar 2009 11:23:27 +0000 http://www.makeuseof.com/?p=13548#comment-378274 <a href="http://www.freecap.ru/eng/" rel="nofollow">FreeCap</a> is a nice free alternative to Proxifier that you may want to check out as well. FreeCap is a nice free alternative to Proxifier that you may want to check out as well.

]]> By: Jorge Sierra http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-378265 Jorge Sierra Mon, 09 Mar 2009 10:06:48 +0000 http://www.makeuseof.com/?p=13548#comment-378265 Shell access and tunneling are pretty much all that SSH does for you. There are many different things you can tunnel through SSH. VNC, Remote Desktop, web sites, FTP, database connections, etc. I even once set up <a href="http://openvpn.net/" rel="nofollow">OpenVPN</a> to tunnel through SSH. Shell access and tunneling are pretty much all that SSH does for you. There are many different things you can tunnel through SSH. VNC, Remote Desktop, web sites, FTP, database connections, etc. I even once set up OpenVPN to tunnel through SSH.

]]> By: Paul M. http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-378213 Paul M. Mon, 09 Mar 2009 00:57:58 +0000 http://www.makeuseof.com/?p=13548#comment-378213 BRILLIANT ARTICLE! And thanks for the tip Scott. Here's a .bat that could be used to initiate the session with PLINK: --START--- start plink -v -ssh @ -pw -D localhost: ---END--- Other than tunneling or VNC, what are some other applications for SSH? BRILLIANT ARTICLE! And thanks for the tip Scott.

Here’s a .bat that could be used to initiate the session with PLINK:
–START—
start plink -v -ssh @ -pw -D localhost:
—END—

Other than tunneling or VNC, what are some other applications for SSH?

]]> By: Jash Sayani http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-378171 Jash Sayani Sun, 08 Mar 2009 15:11:20 +0000 http://www.makeuseof.com/?p=13548#comment-378171 I have setup my own little VPN server on a Mac mini. It works great from HotSpots and on the iPhone! Now all I need is the iStat iPhone app to monitor the temperature... I have setup my own little VPN server on a Mac mini. It works great from HotSpots and on the iPhone! Now all I need is the iStat iPhone app to monitor the temperature…

]]> By: How to Tunnel Web Traffic with SSH Secure Shell. « Mine ting? http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-378142 How to Tunnel Web Traffic with SSH Secure Shell. « Mine ting? Sun, 08 Mar 2009 09:00:31 +0000 http://www.makeuseof.com/?p=13548#comment-378142 [...] via MakeUseOf.com. [...] [...] via MakeUseOf.com. [...]

]]> By: Scott http://www.makeuseof.com/tag/how-to-tunnel-traffic-with-ssh/comment-page-1/#comment-378109 Scott Sun, 08 Mar 2009 00:12:13 +0000 http://www.makeuseof.com/?p=13548#comment-378109 Great post. I use SSH Tunnels to allow to me to watch Hulu as I don't live in the US. I have a little VPS and connect through that. A little tip is to use Proxifier which pushes all traffic through the SSH tunnel made with PuTTy. Great post. I use SSH Tunnels to allow to me to watch Hulu as I don’t live in the US. I have a little VPS and connect through that.

A little tip is to use Proxifier which pushes all traffic through the SSH tunnel made with PuTTy.

]]>