Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to ssh out of a machine running a client to connect to an SSH remote server. The reason I need this is to port forward/tunnel and get an open connection to an application on the client.

The problem is that it seems that all outbound SSH is being blocked by the proxy / firewall. I do not have admin access to client machine. I have control over the remote server machine. Are there any solutions I can try?

Note:

  1. I get no replies when I try to ping from client to external addresses
  2. I wonder how I manage to connect to client machine via teamviewer but not via ssh. How does TeamViewer get through? Can maybe the same port be used for ssh?
share|improve this question
    
TeamViewer might use something like hole punching, just like Skype. Not too sure though. – slhck Sep 26 '11 at 21:43

Can you run you ssh server on ports 80 or 443 instead? These are commonly allowed through a firewall/proxy.

Or as you suggest, run it on the teamserver port.

share|improve this answer
    
I can run server on port 80 or 443, but the problem is that client firewall/proxy still blocks the outbound on these ports. I see this as strange since I can browse all websites on client machine without any restrictions. – Alex Sep 26 '11 at 21:52

Install stunnel on both your server and local machine; configure it to tunnel SSH inside SSL on server's port 443. This will trick most proxies into thinking you are connecting to a typical HTTPS website.

Other protocols such as PingTunnel (ICMP Echo) or Iodine/nstx (DNS) may be a possibility.

As a last resort, if your network MitM's all SSL connections (I've heard that happening), you could install Ajaxterm or Anyterm, which work entirely over HTTP[S].

share|improve this answer
    
This sounds promising, never heard of stunnel. I shall look it up and see if I figure it out. So 'stunnel' can handle this all on its own or does it still need Putty to create the SSH tunnel? – Alex Sep 27 '11 at 5:10
    
stunnel does precisely one thing: tunneling arbitrary TCP connections inside a SSL layer. It does not deal with SSH, you will still need PuTTY for that. – grawity Sep 27 '11 at 5:14

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .