Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Last year I was working in China for a few months. I never bothered setting up a real VPN, but just created a SSH tunnel, and changed my browsers proxy settings to connect through it.

Everything worked great (except flash of course) but that was fine.

However, now I'm back in China but I'm having problems with this approach. I do the same thing as last time, and according to https://ipcheckit.com/ my IP address is indeed the IP of my (private) server in the US, and I'm logging in to my server using a fingerprint I created long before going to China so no MITM should be possible. Furthermore the certificate from ipcheckit.com is from GeoTrust - so everything should be OK

However, I still can't access sites which are blocked in China. Any idea how this could be possible?

share|improve this question
8  
DNS might not be properly sent through the tunnel, try checking for unencrypted packets with Wireshark when browsing. –  Eroen Sep 28 '12 at 6:50
    
Thats a good point. Thank you. I'll look into it –  Martin Sep 28 '12 at 6:51
    
Yup, it was a DNS problem. Thank you very much –  Martin Sep 28 '12 at 6:53
    
superuser.com/questions/103593/… –  James T Sep 28 '12 at 9:36
5  
@Eroen - Put your comment in an answer so that Martin can accept it. –  Nifle Sep 28 '12 at 11:44
add comment

2 Answers

If you use linux or osx, you could try using sshuttle to create your ssh tunnel. That will make sure all the packets are being tunnelled.

https://github.com/apenwarr/sshuttle

./sshuttle -r username@sshserver 0/0 -vv

Additionally use a public dns server like Google's or OpenDNS

Also if you'd like to proxy your DNS requests, the command would be.

./sshuttle --dns -vvr username@sshserver 0/0

Sshuttle has worked for me wonderfully over the past 2 years and I can access everythings thats blocked by vietnamese ISPs.

Only downside is, it supports only password based authentication (AFAIK).

share|improve this answer
add comment

Try using TOR over your ssh tunnel use your ssh tunnel under proxy settings in TOR

share|improve this answer
    
Why would he want to do that? That'll just make everything REALLY slow. And he probably doesn't need the anonymity, just a way to get around the chinawall. –  ThiefMaster Nov 23 '13 at 11:06
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.