Hacker News Reader

Comment by drivebyacct | Hacker News Reader

I know it's OT, but I have a PC that is behind a firewall that I have no control over. I have a public server that I run/control. Can I use SSH to create a tunnel so that I can hit publicserver.com:port and have it route through a ssh tunnel initiated from my firewall'ed private computer?

View on HN

If I remember rightly, issue this type of command at the private computer.

ssh -R 1234:privatecomputer:22 user@publicserver

So it's: secureshell, reversed, publicport to privatemachine:port, authentication+address for public machine.

Then traffic to publicserver:1234 should appear at privatecomputer:22

Perhaps there should be a nicer syntax like "ssh admin@publicserver.com:1234 => localhost:50"

You might try corkscrew (http://www.agroman.net/corkscrew/). It can tunnel a raw connection over many HTTP proxies. Some corporations block all outgoing ports, then use an HTTP+SSL proxy to filter and monitor all traffic (including SSL traffic). Use SSH over corkscrew through the proxy, with the ssh option to establish a local SOCKS proxy tunneled to the remote host, and you're good to go.

If the server is not using the https/ssl port 443 then you can run ssh server in that port and just ssh into it from the client since the firewall most likely won't block outbound web connections. Also see "firewall punching": http://www.h-online.com/security/features/How-Skype-Co-get-r...

Reply on news.ycombinator.com