Re: SSH tunnel over SQUID

Am Wed, 15 Oct 2008 17:30:58 -0700 schrieb nicola.calipari:

Hello.

I have to reach a cluster of linux machines protected by a firewall.
The usual way to reach them is to SSH from inside the network, but i
need to do it from outside.

A http proxy cant speak ssh, you need to run the ssh client behind the
proxy and you have to speak http/s through the proxy.

I have the credentials and everything, but the cluster belong to a
university so the admin is lazy and i need to minimize the requests to
him.

So, you think after the proxy you'll have access to the network behind?
If so then you're right the admins are lazy, but I don't think so.

My idea was to use a squid proxy that is open to outsiders (there's a
ezproxy too).

And behind the proxy is surely another firewall to prevent access to ssh.

http://users.unimi.it/banchedati/ezproxy.html

Here's .pac config for two different squid proxy:

http://proxypac.unimi.it/proxy.pac

http://users.unimi.it/banchedati/proxysnx.pac

As i said I have full credentials to get inside the net, is just that
i don't know how to do and that the admin don't have time to help me.

It doesn't matter, first the admins have a reason to prevent access via
ssh second after the proxy is surely an ip filter/firewall or whatever to
prevent access to private segments and if not there could also be a layer3
router to do the work.

Your only chance I think is to access a ssh client behind the proxy on a
webserver (cgi shell or whatever) but it only works if your webserver can
reach the cluser and you can reach the webserver or something it speaks
http/s.

cheers
.

Relevant Pages

  • Re: SSH through a proxy
    ... >I'm basically just trying to ssh from a machine inside our network ... >of first SSHing to a machine in our own network that isn't behind ... but outside of our proxy. ...
    (comp.security.ssh)
  • Re: SSH through a proxy
    ... >I'm basically just trying to ssh from a machine inside our network ... >of first SSHing to a machine in our own network that isn't behind ... but outside of our proxy. ...
    (comp.security.ssh)
  • Re: SOCKS 5 protocol & sysadmin
    ... bypassing proxy settings using SOCKS 5 protocol? ... example SSH he can tunnel almost any TCP protocol into it and you will ... By the way, Even without SSH access, Any other opened port can be used ...
    (comp.os.linux.security)
  • Re: SSH through a proxy
    ... >>configure it so that it will automatically work through a proxy ... I know that the proxy is set up to ... >>allow http access but I'm not sure about SSH. ... I'm basically just trying to ssh from a machine inside our network ...
    (comp.security.ssh)
  • Re: SSH through a proxy
    ... >>configure it so that it will automatically work through a proxy ... I know that the proxy is set up to ... >>allow http access but I'm not sure about SSH. ... I'm basically just trying to ssh from a machine inside our network ...
    (comp.security.ssh)