Re: dynamic portforwarding with socks5?

From: Andrew E. Schulman (andrex_at_deadspam.com)
Date: 06/25/03


Date: Tue, 24 Jun 2003 22:30:16 -0400


> does anybody know of a patch for OpenSSH wich provides a socks5 feature to
> dynamic portforwarding?

I'm not sure exactly what you mean, but maybe what you want to do is run
a socks server, e.g. danted, and tunnel your connection to it over ssh.
I use this scheme to defeat my company firewall at work. It works like
this:

The company firewall blocks my access to some useful network services.
But, it allows me to connect out to any IP address on remote port 443,
for SSL. So, I set up sshd on my home box to listen on port 443. I
connect to home from work via ssh.

Now on my (Windows) box at work, I run my network clients within
sockscap. I tell sockscap that the socks server is 127.0.0.1:1080. ssh
forwards this connection to sshd at my home box. sshd hands the
connections to danted, which sends them out to the net. So the
connection path is:

browser -> sockscap -> ssh ---|---> sshd -> danted ->
www.mybossisa***.com

It works very well. The nice thing about it is that I don't have to set
up a separate port forwarding rule for each connection. sockscap takes
care of it all for me. Also, using socks5, even DNS requests can be
resolved remotely-- useful for browsing mybossisa***.com.

-- 
To reply by e-mail, change "deadspam.com" to "alumni.utexas.net"