#Command line ssh tunnel install#
#Command line ssh tunnel software#
#Command line ssh tunnel Pc#

#Command line ssh tunnel install#

The SSH terminal we will be using in this article is called PuTTY written by Simon Tatham (if you’re reading this Simon, thanks for such a wonderful piece of useful software).ĭownload and install PuTTY SSH, and/or one of its automated tools such as PuTTY Shell or PuTTY Link. Most *nix’s, in fact, have it available to install in the package manager. This could however be any OS you choose to use as PuTTY is available for just about every platform available.

#Command line ssh tunnel Pc#

Once your server is up and running and connected to the Internet, we then turn our attention to the client, for me this was a fairly standard PC running Windows XP. I punched a port forward through the routers firewall from port 9000 on my inbound IP to port 22 on the servers IP address inside the network. For this solution, I picked a random high port of 9000 (when doing things like this, it’s always a good idea to stay away from common port ranges that script kiddies will use automated tools to find).

#Command line ssh tunnel software#

Installing webmin, and having it listen on its default port of 10000.įinally once you have all your software set up, you need to ensure there is ONE single inbound port forward of your choice to the SSH port on your server machine. Setting Apache to listen on standard web port 80, and installing PHP MyAdmin in a folder on the web server called DBA. Setting up Squid to allow unauthenticated web proxy access via the server’s public internet connection from clients connecting to port 8080. Setting up Dovecot to listen on the standard POP3 port of 110, and to make available the standard mailboxes of any user registered on the system. Setting up Postfix, listening on the standard SMTP port of 25 and accepting email for a local addresses within it’s domain. Setting up sshd (the open SSH Daemon) to listen on standard SSH port 22 ready to accept interactive command line logins. Once you have the required packages installed, set up the server packages to operate locally (As though you where using the server from your location), for me this meant the following: I also installed “webmin” to allow general admin of the server. I also made sure that my copy of Apache had PHP capabilities, and installed phpMyAdmin into the web server root to allow me to access my database servers. OpenSSH (to provide the SSH tunnel access)Īpache (for web development, and local access to my web database panels) To achieve this, I installed the following packages onto a Dell PowerEdge server running Ubuntu Linux 7.10 server addition: For me, this meant I wanted to send and receive my email, I wanted to access my development host and databases, and I wanted unfiltered access to the web in general. Set your server up with any software you require to perform the tasks you wish to achieve.

Public Internet connections in the 2 respective locations.

A client PC onto which you have permission to install software.

A private server to which you have super user access either via console, or SSH.

In order to build this solution, you’ll need the following: Put simply, an SSH tunnel is a direct link from your PC that you sit in front of (we shall call this the Client) and a remote machine at an entirely different location preferably outside the control of the filtered zone.

The solution to my problem was to use SSH tunnels. This got me to thinking about using some kind of encryption to prevent the filters picking up my traffic and effectively bypassing the filters, thus allowing my traffic to get through unaffected. This posed a problem for me in several ways, one of the main ones being that I was having difficulty sending and receiving updates for a website that I’m the technical lead for, because words matched the filters in my emails, and certain articles posted to said site by its users stopped pages from being browsed. The extent of the filtering was not just at web browser level but also across other common protocols such as email, FTP and even some socket level applications. Recently I had the privilege of working on a short term contract in the Middle East, and the Internet access where I was based was severely filtered.