Hacker News Reader

Comment by reacweb | Hacker News Reader

When the ssh access to internet is available from office, it is really easy to have uncensored internet with only portable applications (putty and chrome):

My putty setting to access my ubuntu box from my office has a SSH port forwarding: L6128:127.0.0.1:3128

On my box, sudo apt-get install squid

I launch chrome with the command line option --proxy-server=127.0.0.1:6128

View on HN

SSH has SOCKS proxy support built in, no need for squid and such unless you need to do more advanced things. Just start ssh with:

  ssh -D 8080 myuser@remote_ssh_server

You can then set up your browser's proxy config to use 127.0.0.1:8080

ssh tunnels are not very stable if bad connection, I recommend autossh to maintain the tunnel

http://linuxaria.com/howto/permanent-ssh-tunnels-with-autoss...

> When the ssh access to internet is available from office, it is really easy to have uncensored internet with only portable applications (putty and chrome):

That's clearly not a solution for 99.9% of people who live in regions of the world that heavily censor access to the Internet. And it fails completely during sensitive times (such as an Iranian election a few years ago) when the censors block SSH, and then resort to whitelisting plaintext HTTP.

But you're not wrong, and SSH tunnels are a fundamental building block of our technology.

Can always buy a cheap vm on amazon and tunnel though that.

sshuttle works quite nice as well, provided you're on Linux or MacOS

https://github.com/apenwarr/sshuttle

I don't think it works on Yosemite yet since the firewall has changed.

Reply on news.ycombinator.com