Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 3 down vote favorite
1

I want to ssh out of a machine running a client to connect to an SSH remote server. The reason I need this is to port forward/tunnel and get an open connection to an application on the client.

The problem is that it seems that all outbound SSH is being blocked by the proxy / firewall. I do not have admin access to client machine. I have control over the remote server machine. Are there any solutions I can try?

Note:

  1. I get no replies when I try to ping from client to external addresses
  2. I wonder how I manage to connect to client machine via teamviewer but not via ssh. How does TeamViewer get through? Can maybe the same port be used for ssh?
share|improve this question
TeamViewer might use something like hole punching, just like Skype. Not too sure though. – slhck♦ Sep 26 '11 at 21:43

2 Answers

up vote 1 down vote

Can you run you ssh server on ports 80 or 443 instead? These are commonly allowed through a firewall/proxy.

Or as you suggest, run it on the teamserver port.

share|improve this answer
I can run server on port 80 or 443, but the problem is that client firewall/proxy still blocks the outbound on these ports. I see this as strange since I can browse all websites on client machine without any restrictions. – Alex Sep 26 '11 at 21:52
up vote 0 down vote

Install stunnel on both your server and local machine; configure it to tunnel SSH inside SSL on server's port 443. This will trick most proxies into thinking you are connecting to a typical HTTPS website.

Other protocols such as PingTunnel (ICMP Echo) or Iodine/nstx (DNS) may be a possibility.

As a last resort, if your network MitM's all SSL connections (I've heard that happening), you could install Ajaxterm or Anyterm, which work entirely over HTTP[S].

share|improve this answer
This sounds promising, never heard of stunnel. I shall look it up and see if I figure it out. So 'stunnel' can handle this all on its own or does it still need Putty to create the SSH tunnel? – Alex Sep 27 '11 at 5:10
stunnel does precisely one thing: tunneling arbitrary TCP connections inside a SSL layer. It does not deal with SSH, you will still need PuTTY for that. – grawity Sep 27 '11 at 5:14

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.