Comments for - [ t o i c . o r g ] -

Comment on Bypassing corporate firewall with reverse ssh port forwarding by thehidden

thehidden — Fri, 23 Jul 2010 17:58:13 +0000

thank you for the good howto. i tried your idea with the reverse tunnel and every think works find. except of create an additional dynamic tunnel als socks proxy. can you explain please, how to do that? the tunnel is up, but no http traffic flows through.

kind regards
thehidden

Comment on Bypassing corporate firewall with reverse ssh port forwarding by Branko

Branko — Tue, 25 May 2010 10:59:46 +0000

You should set “GatewayPorts clientspecified” in /etc/ssh/sshd_config not in /etc/ssh/ssh_config

/etc/ssh/ssh_config is config for ssh client and /etc/ssh/sshd_config is config for ssh server running on that machine.

Comment on Bypassing corporate firewall with reverse ssh port forwarding by Connectiong two seperate LANs with reverse SSH | Bijan Hoomand

Connectiong two seperate LANs with reverse SSH | Bijan Hoomand — Mon, 24 May 2010 18:40:48 +0000

[...] toic, reverse ssh port forwarding [...]

Comment on Bypassing corporate firewall with reverse ssh port forwarding by bijan

bijan — Sat, 22 May 2010 07:59:37 +0000

Branko, this is a great post, thank you. However I have the same issue as Justin. Let’s say I have a server (the middle man) with an IP address of 174.2.2.2, from my office box, I run:

ssh -R 178.2.2.2:1200:localhost:22 bijan@178.2.2.2

It connects with no problem. I also put “GatewayPorts clientspecified” in /etc/ssh/ssh_config. When I issue “netstat -an | grep LISTEN”, I see it’s listening on port 1200 for 127.0.0.1

The problem as Justin mentioned is that when I issue:

ssh -p 1200 officeUser@178.2.2.2

I get the following error: “ssh: connect to host 178.2.2.2 port 1200: Connection refused”. However if I ssh into 178.2.2.2 (to port 22 with a user on it) and then issue:

ssh -p 1200 officeUser@localhost

It’s no problem, I login like a charm! I should say I disabled iptables, so, is it really a filtering problem or something wrong with me?

Comment on Secure synergy setup by SSH port forwarding | - [ t o i c . o r g ] -

SSH port forwarding | - [ t o i c . o r g ] - — Fri, 07 May 2010 10:47:50 +0000

[...] like in one of the previous posts (secure synergy setup) we will use this tunnel to secure our traffic from eavesdropping. Ftp actually has sftp (ftp over [...]

Comment on Preventing ip conflicts in xen by xdaan

xdaan — Sun, 11 Apr 2010 23:15:46 +0000

Hi,

I’ve tried this solution, but unfortunately it seems to me that it doesn’t give the expected results. Problem with IP spoofing is still there.

So if you really want to prevent stealing IP adressess inside of XEN domU, here is my tested an 120% working solution – http://xdaan.envirobyte.sk/rand.php?x=xen-ip-conflict

Comment on Firewalling xen bridge by entplex

entplex — Sun, 28 Mar 2010 14:46:19 +0000

I don’t believe this configuration works with kernel 2.6.20+ Has anyone found any viable work-a-rounds?

Comment on Bypassing corporate firewall with reverse ssh port forwarding by Links 15/3/2010: CrossOver Linux, Tim Bray Joins Google | Boycott Novell

Links 15/3/2010: CrossOver Linux, Tim Bray Joins Google | Boycott Novell — Mon, 15 Mar 2010 20:03:56 +0000

[...] Bypassing corporate firewall with reverse ssh port forwarding [...]

Comment on Bypassing corporate firewall with reverse ssh port forwarding by Christian Rishøj

Christian Rishøj — Fri, 05 Mar 2010 17:33:35 +0000

Excellent post! Thorough, explanatory and extremely useful. You saved the day!

Comment on SSH basics by SSH port forwarding | - [ t o i c . o r g ] -

SSH port forwarding | - [ t o i c . o r g ] - — Tue, 16 Feb 2010 13:45:01 +0000

[...] can also speed things up by using ssh-keys and [...]