Questions tagged [ssh-tunnel]

An SSH tunnel leverages the SSH protocol to transport unencrypted data through an encrypted connection.

An SSH (secure shell) tunnel provides a secure connection through which unencrypted data can be sent.

This technique can be useful for:
- Providing security for insecure network protocols.
- Hiding one's true location (ip).
- Circumventing blocked ports in firewalls.

857 questions
7
votes
2 answers

How do I resolve OpenSSH protocol mismatch?

I'm trying to connect to an SSH server running on port 443. I can SSH into my devbox on Port 443: ssh -L 8080:devbox:443 root@devbox -p 443 But I can't actually get the devbox to load in my browser. When I go to localhost:8080 I get the following…
jawns317
  • 171
  • 1
  • 1
  • 4
7
votes
1 answer

Reliable Reverse SSH Tunnel

I'm using autossh to open a reverse SSH tunnel using private keys. The tunnel user's shell is rssh and is verified as working. The problem I'm having is as such, regardless of ClientAliveInterval (15) and ClientAliveCountMax (3) (the sshd defaults),…
Lee Hambley
  • 360
  • 3
  • 12
7
votes
4 answers

Securing NFS against SSH tunneling

I was idly reading http://nfs.sourceforge.net/nfs-howto/ar01s06.html trying to understand why localhost exports were bad when I got to the section "6.4. Tunneling NFS Through SSH". Everything in that section about it being a possible security…
CrazyCasta
  • 215
  • 3
  • 10
7
votes
1 answer

Reverse ssh tunnel: connexion refused

I'm trying to setup a reverse ssh tunnel as follows: A ==========> B <----X---- C I'm initiating the tunnel from A with: ssh -p 443 -NR 19001:localhost:21 userOnB@B On computer B I can use the tunnel fine if I use: ssh -p 19001…
gregseth
  • 193
  • 2
  • 8
7
votes
1 answer

How to force all packets go through ssh tunnel?

We have an SSH tunnel (ssh -ND 127.0.0.1:8080 user@example.com), that works fine for browsers if point them to 127.0.0.1:8080 as socks5 proxy, but other traffic is still not going through this tunnel. How would i make absolutely all traffic go…
Alexey Kamenskiy
  • 794
  • 1
  • 9
  • 23
7
votes
2 answers

Block SSH tunneling to IP, allow only for certain users

I need to setup SSH to block all access to a certain IP on port 555. Only a small group of users should be allowed to tunnel to that IP. Currently I have the following stuff in my sshd_config Match User bob PermitOpen 1.2.3.4:555…
Pratik Amin
  • 3,303
  • 3
  • 22
  • 19
7
votes
2 answers

Running multiple services on Port 443, Tunnel SSH over HTTPS

Situation: I want to tunnel SSH sessions through HTTPS. I have a very restrictive firewall/proxy which only allows HTTP, FTP and HTTPS traffic. What works: Setting up a tunnel through the proxy to a remote linux box that has a sshd listening at port…
lajuette
  • 771
  • 6
  • 16
6
votes
3 answers

Remote port forwarding inside Docker containers

I'm trying to setup a docker container that I use to bypass firewalls/NAT's to allow SSH access to the computers behind these routing barriers. In essence, I have an SSH service listening inside of a docker container, that my other computers…
staticfloat
  • 257
  • 1
  • 3
  • 8
6
votes
4 answers

Prevent closing of SSH Local Port Forwarding

I am running various services on an Ubuntu virtual machine running on Azure, and I would like to access some of the services remotely, even though the ports are not open publicly. To do so I have set up a script to do Local Port Forwarding using…
oligofren
  • 641
  • 2
  • 8
  • 23
6
votes
2 answers

SSH Reverse Port Forward Bind to address

So, I have a script setup to automatically open a SSH connection to my server, and reverse port forward a port to me for SSH connections to my home desktop. This script has always worked until now that I've migrated servers. The short of it is that…
Craige
  • 311
  • 1
  • 2
  • 5
6
votes
1 answer

`ssh -NfR` equivalent with dropbear

I want to open a reverse tunnel in background. When using OpenSSH ssh -NfR 9022:127.0.0.1:22 always worked. When I did that with dropbear on my router, it failed like this: # ssh -NfR 9022:127.0.0.1:22 ssh: Exited: Error resolving…
keks
  • 163
  • 1
  • 4
6
votes
2 answers

How to bestly setup a ssh tunnel for access to a remote network (Linux)

My situation: I want to remotely debug my c++ application with gdbserver and eclipse. Eclipse is running on my local workstation (in the 192.168.0.0 network) and gdbserver is running on a clustermachine in the 10.0.0.0 network. I have ssh access to…
Peter Smit
  • 1,669
  • 4
  • 21
  • 37
6
votes
2 answers

VNC connection via SSH proxy machine

I would like to make a VNC connection from home to a Windows machine at work. The Windows machine is not accessible from the outside, but there is a Linux box that does have port 22 open, so it would seem that this can be done. I suspect it's just…
pufferfish
  • 2,830
  • 11
  • 39
  • 40
6
votes
2 answers

reverse ssh tunnel listens on wrong interface

I'm working with a server that is behind a firewall. I have established an ssh tunnel to an intermediate server in the internet like this: remoteuser@behind_fw$ ssh -N -f -R 10002:localhost:22 middleuser@middle But I can't connect directly throgh…
jigfox
  • 173
  • 1
  • 6
6
votes
4 answers

ssh port forwarding freezes after 10 simultaneous connections

I am using port forwarding to utilize proxy server which is on remote machine. Remote machine hostname is remotemachine. Proxy is listening on 8118 port. I am translating this port to local port 5223. ssh -vvv -N remotemachine -L…
Marko Kevac
  • 255
  • 1
  • 3
  • 6