Comments on: How to Tunnel Web Traffic with SSH Secure Shell

By: hammer

hammer — Wed, 10 Feb 2010 03:43:55 +0000

http://www.tunnelfree.co.cc/ A tunnelling only SSH Server,based on java

By: VaÅ¡ek

VaÅ¡ek — Wed, 25 Nov 2009 12:33:16 +0000

SSH traffic is distinguishable. Look at the packet capture. At the beginning of the SSH connection you will see SSH version etc. Many major firewalls are able to distinguish and block ssh on non-standard ports (for example Check Point and Fortinet).

By: Encryption Software

Encryption Software — Tue, 27 Oct 2009 22:14:01 +0000

As noted, Port Forwarding is a different beast altogether. Think of it as poking singular holes in your firewall for singular apps to make their way through.

By: Jorge Sierra

Jorge Sierra — Mon, 19 Oct 2009 17:48:38 +0000

It's not the same as port forwarding, although port forwarding may be necessary to do it. Port forwarding typically takes place with a firewall/router that has a machine behind it. That machine is running some kind of server that you want to allow access from outside of the firewall. Tunneling allows you to send (relatively) arbitrary traffic through an SSH server into a client. Essentially, the SSH server becomes a proxy for the client, and encrypted data is transmitted between the server and client, so it is safe and secure. The data being retrieved by the server for the client may or may not be secure/encrypted. Fundamentally speaking, it is as though the client is actually on the server requesting data. So if you use SSH tunneling as a proxy to surf the web, it is just as safe/secure as if you were on the server surfing the web.

By: sem

sem — Mon, 19 Oct 2009 14:35:40 +0000

Is this tunneling the same as port forwarding? I am a little unfamiliar on this topic. How safe and secure is this?

By: Jorge Sierra

Jorge Sierra — Wed, 15 Jul 2009 13:16:28 +0000

I’m afraid I don’t understand the question. What do you mean when you say a server to pass your encrypted ssh data to? SSH already performs the function of passing encrypted data between the SSH client and server. The tunnels are used to pass through any kind of TCP traffic on the specified port(s).

By: David

David — Wed, 15 Jul 2009 05:03:20 +0000

Hey i’m familiar with ssh tunneling but i don’t have or know any servers to pass my encrypted ssh data to.I googled about ssh proxy servers but all i got was crap.Does anyone know a good ssh proxy server that can handle my traffic ?

Thanks

By: Jorge Sierra

Jorge Sierra — Thu, 30 Apr 2009 12:33:20 +0000

That’s exactly right. Make sure that port 22 on your Linux box is accessible from wherever you’re going to be connecting with Putty. Then just connect Putty w/ the VNC tunnel configured properly, launch the VNC client, and connect the VNC client to localhost.

By: Jon

Jon — Wed, 29 Apr 2009 19:18:19 +0000

Ok… I might be heading in the wrong direction with this. I want to have a secure remote desktop connection to a linux box at home. I have a windows laptop with putty installed. The SSH server is already installed and configured so that I can SSH into my server from putty. Is tunneling VNC the way to go and if so would I just use localhost for all the destinations since its on the same computer?

By: Jorge Sierra

Jorge Sierra — Wed, 29 Apr 2009 11:32:26 +0000

Tunneling games directly through an SSH tunnel may be possible (as long as it TCP only, and not UDP traffic), but it is definitely a much more complicated process. Probably your best bet is to use a program that will allow you to tunnel traffic from a program through a SOCKS proxy. Scott mentioned Proxifier in the first comment on the article. You can try it out with the 31-day free trial. There is one free program called FreeCap. I've used it in the past and had some luck with some programs, but not all.

By: Paul Gowers

Paul Gowers — Wed, 29 Apr 2009 08:40:06 +0000

Hey Jorge, great, easy to follow article. Just set up my first SSH tunnel from laptop at home to client following your instructions and now running Firefox over it. Thanks a million!
Cheers
Paul

By: Nicodareus

Nicodareus — Tue, 28 Apr 2009 22:11:23 +0000

Heh. I stumbled across this while trying to figure out how to tunnel WoW and EQII through to my personal computer at home. It sort of helped me make sense of a few things, but doesn’t really help me out much in the long run. Basically, I’m at work. And while I have full permission to play these games (And watch TV.. And.. Well.. Sleep for that matter.) there are firewalls in the way as one would expect. I can use my own connection and play just fine, but their satellite internet is about 800x better than my cellular internet. Really, it’s not even worth trying to play on my little cell card here 40 miles from anywhere.

I’ve done alot of reading and know there is a way to set up SOME sort of tunneling to handle this for me, but it all seems really intimidating and complex. Probably moreso than it really is. Any advice or perhaps a link to a ‘Network tunneling for dummies’ article would be appreciated. n.n

By: Jorge Sierra

Jorge Sierra — Tue, 28 Apr 2009 10:46:06 +0000

VNC is a great application for tunneling through SSH. The setup is very much the same as it is for Remote Desktop, however, instead of forwarding port 3389, you would forward port 5900.

Let’s say the machine you want to tunnel to is at IP 192.168.1.20 and VNC is running on port 5900. The local tunnel you would set up would need to be directed to 192.168.1.20:5900 and you could use 5900 as the local port. Once you make the SSH connection with the port forward, you bring up the VNC client, and connect it to localhost:5900. SSH will redirect the traffic to the correct machine.

By: Jon

Jon — Tue, 28 Apr 2009 04:16:38 +0000

Looks really useful, but I’m kinda new so not entirely sure how to use it yet. Could somebody point me in the right direction for tunneling VNC through SSH.

By: Josh

Josh — Mon, 23 Mar 2009 17:09:18 +0000

There are a few different ways to do this, actually, and if you have a Mac, you can even create (very easily) your own application to do it for you.

Step-by-step tutorial on how to do it here:

http://www.corruptionoflol.com/?p=58