Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

A bit of an odd question, but I'd like to give it a shot. I'm working with a company who's setup is a bit over secure (if you can even say that), essentially the server has block all outbound connections, except if you SSH/VNC in to the server (Ubuntu based).

Would it be possible to setup a proxy back through that SSH connection after I log in? So for example, I could allow a browser connection to pass through after my computer as it connects through SSH?

I know, I said the question was odd. Any help is apprecieated!

share|improve this question
add comment

1 Answer

up vote 2 down vote accepted

Probably the easiest method in this case, with SSH access, would be a SOCKS proxy.

Not sure what you're working with on your local machine, but you can do it with whatever.

First, set up the tunnel

*nix:

ssh -ND PORTNUM user@server

The port isn't a big deal, the most common alternate HTTP port is 8080 since it isn't system reserved (I think 1 - 1024 are, or most anyway).

Windows

Using PUTTY (CLI or GUI) How-To.

  • GUI Method
    1. Open PUTTY
    2. Navigate to Connection > SSH > Tunnels
    3. Choose Source Port (8080 or whatever), Dynamic, and Auto.
    4. Select 'Add' and then go back to the first screen, enter the server and log-in. (a CLI option exists too if you want to put putty in your PATH.

Proceed to set up the browser.

Second, set up the Browser:

Then you would need to set your browser to use a SOCKS proxy over the specified port for traffic. Lifehacker Link.

Warning

I would, however, guess that the restrictions are in place for a reason and that you should ask if this is okay before doing it. There is potential that an employer with restrictions such as those in place watch for tunnels and such as well and traffic to/from the server won't be encrypted so they could see what you're up to.

share|improve this answer
    
I thank you for the warning, luckily my employer is aware! They simply are looking for a workaround without changing their security. The method you explained theorectially makes perfect sense and should of worked, but something with their security is unfortunetly blocking it. Even after running netstat on the server, it can't see any new port listening and won't let me proxychain anything through. The answer is still correct though, thanks again! –  Dboy1612 Apr 5 '13 at 19:05
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.