5

I want to ssh out of a machine running a client to connect to an SSH remote server. The reason I need this is to port forward/tunnel and get an open connection to an application on the client.

The problem is that it seems that all outbound SSH is being blocked by the proxy / firewall. I do not have admin access to client machine. I have control over the remote server machine. Are there any solutions I can try?

Note:

  1. I get no replies when I try to ping from client to external addresses
  2. I wonder how I manage to connect to client machine via teamviewer but not via ssh. How does TeamViewer get through? Can maybe the same port be used for ssh?
1
  • TeamViewer might use something like hole punching, just like Skype. Not too sure though.
    – slhck
    Sep 26, 2011 at 21:43

2 Answers 2

2

Can you run you ssh server on ports 80 or 443 instead? These are commonly allowed through a firewall/proxy.

Or as you suggest, run it on the teamserver port.

1
  • I can run server on port 80 or 443, but the problem is that client firewall/proxy still blocks the outbound on these ports. I see this as strange since I can browse all websites on client machine without any restrictions.
    – Alex
    Sep 26, 2011 at 21:52
2

Install stunnel on both your server and local machine; configure it to tunnel SSH inside SSL on server's port 443. This will trick most proxies into thinking you are connecting to a typical HTTPS website.

Other protocols such as PingTunnel (ICMP Echo) or Iodine/nstx (DNS) may be a possibility.

As a last resort, if your network MitM's all SSL connections (I've heard that happening), you could install Ajaxterm or Anyterm, which work entirely over HTTP[S].

2
  • This sounds promising, never heard of stunnel. I shall look it up and see if I figure it out. So 'stunnel' can handle this all on its own or does it still need Putty to create the SSH tunnel?
    – Alex
    Sep 27, 2011 at 5:10
  • stunnel does precisely one thing: tunneling arbitrary TCP connections inside a SSL layer. It does not deal with SSH, you will still need PuTTY for that. Sep 27, 2011 at 5:14

This site is temporarily in read-only mode and not accepting new answers.

Not the answer you're looking for? Browse other questions tagged .