Re: Destination server/port to tunnel www?

From: DharmaFog (DharmaFog_at_VirtualMachines.COM)
Date: 05/25/04

  • Next message: DharmaFog: "Re: set umask for sftp connection" 
    Date: Tue, 25 May 2004 12:14:58 -0700

    Toby Newman wrote:
    > I'm connecting to my home PC remotely using putty.
    > Okay, first of all, three givens:
    >
    > To tunnel POP3 over SSH, I connect
    > localhost:(arbitrary_port_over_3000) ->
    > my.pop3.mailbox.com:110
    >
    > To tunnel SMTP, I connect
    > localhost:(another_arbitrary_port_over_3000) ->
    > home.ISPs'.SMTP.server:25
    >
    > To tunnel usenet, I connect
    > localhost:(another_arbitrary_port_over_3000) ->
    > home.ISP's.news.server:119
    >
    > So if I want to tunnel www access, what do I put in as my destination?
    > Is it
    > my.gateway.ip:80
    > my.dns.server:80
    > my.router.ip:80
    > or something completely different?!
    >
    > I've been able to tunnel to my home web server, to my router's admin
    > page, but I've not been able to tunnel out through my router onto the
    > www.
    >
    > Thanks for any advice,
    >

    First, you need a SSH server on the other end to establish the
    tunnel. As the phrase "port forwarding" suggests, you can only
    forward ports.

    Second, it's extremely dangerous to port forward anything from your
    ISP to your local desktop.

    A secure link requires that both end points trust each other and
    understand each others security policy.

    Encrytion is a necessary but not a sufficient condition for
    establishing a secure link.

  • Next message: DharmaFog: "Re: set umask for sftp connection"

    Relevant Pages

    • Re: Reverse Shell?
      ... >> behind a firewall so I can't ssh into their computer. ... > follow the tunnel back to their machine and then help them. ... Connections to that port will be forwarded through the ...
      (Debian-User)
    • RE: Tunneling over ssh with termination by the FW
      ... I would use something like Putty (ssh client software) to open a secure ... tunnel with the firewall. ... If the firewall has the sshd running on port ...
      (SSH)
    • Re: ssh tunneling
      ... An ssh tunnel means that the traffic is all ... tunneled through the existing ssh connection. ... The gateway is listening on port 22, and vncserver is listening on port ... Then there's one connection: from the laptop to the gateway's port 22 ...
      (Debian-User)
    • Re: Tunnneling?
      ... >> might be able to do something temporarily using ssh and port forwarding. ... > I don't have a machine with a real IP on the internet on my network. ... > That could theoretically be set-up for a tunnel or something like that... ...
      (comp.os.linux.networking)
    • Re: ssh over http proxy... the good ol story
      ... However, I only can access PORT 80 from work, so I ... > well and he's listening on port 80. ... Here are the commands you'd need to do at work (using ssh) ... The tunnel ends are at home and at your local machine. ...
      (comp.os.linux.networking)