SSH Tunnel/Proxy for Browsing? 1

[thedaver]

I'm hoping to bypass a client's firewall and route my WinXP/2000 desktop's entire port 80/TCP/HTTP flow through my offsite linux/ssh box. I know there's port forwarding, but I'm having trouble putting the puzzle together in my mind.

Can someone google/tip me in the right direction? I'd prefer not to guess my way through this... Appreciated.

Hosting Solutions for Home or Business.

http://www.surfinbox.com/hosting/

 

[ericbrunson]

Do you want to use your offsite box as a proxy so you can surf around their filters? Or do you want httpd connections to your offsite box to terminate on your local httpd?

 

[thedaver]

Eric,
I want to rig up my Windoze browsers to "tunnel" through the customer firewall, bounce through MY SSH server, and automagically route to any destination web sites without prior entries in a 'hosts' file or something hinky.

This is probably a proxy if we wanted to be technical, but I need ssh to get out. I would be tolerant of setting a local route for 0.0.0.0/0 to go through the SSH tunnel/proxy for all non-local addresses if that's viable.
Dave.

Hosting Solutions for Home or Business.

http://www.surfinbox.com/hosting/

 

[ericbrunson]

I do this all the time.

You need a proxy on your ssh server, like apache's mod_proxy or squid or something. After that you tunnel traffic from a port on your local machine to the proxy port on the server with something like:

ssh -L 8888:localhost:80 your.remote.server

Finally you set your browser to use the localhost port 8888 as it's proxy.

It's not possible to do it with just ssh, the remote proxy is required.

 

[thedaver]

OK, but do you have to specifically configure any particular website on the proxy or can you set it up that it proxies for all destinations? I think the answer is that it defaults to any destination is allowed, but I'd ask for your confirmation. Also, can this be locked down to prevent someone else from using it as an anonymizer without my permission?

Hosting Solutions for Home or Business.

http://www.surfinbox.com/hosting/

 

[ericbrunson]

You'd have to check the docs on whatever proxy you install. I use apache and it defaults to proxy any request, then I restrict incoming access to the localhost, since thats where the connection appears from after the tunnel gets the traffic to the machine.

 

[thedaver]

Bingo!

Hosting Solutions for Home or Business.

http://www.surfinbox.com/hosting/