Re: Forwarding HTTP traffic through SSH using Windows

From: Richard E. Silverman (res_at_qoxp.net)
Date: 07/24/03 

Date: 24 Jul 2003 12:33:28 -0400

>>>>> "DT" == Darren Tucker <dtucker@dodgy.net.au> writes:

    DT> Use "ssh -D 1080 desktop" to establish a DynamicForward then tell
    DT> your laptop to use a SOCKS server at 127.0.0.1 port 1080.

I wouldn't recommend this until socks5 support arrives in OpenSSH. The
reason for this setup is presumably to protect your web browsing traffic
from prying eyes on the network between the client and the SSH server.
With the current implementation -- socks4 only -- using DynamicForward
leaks considerably more information that the solution I suggested, since
the web browser on the client must do all its name lookups outside the
tunnel. So, even though your HTTP requests are encrypted, a sniffer will
see all the domain names from your URL's conveniently laid out in a series
of DNS queries. 

-- 
  Richard Silverman
  res@qoxp.net