You are not logged in.

#1 2010-12-15 07:31:46

bangkok_manouel
Member
From: indicates a starting point
Registered: 2005-02-07
Posts: 1,557

SSH: Tunneling HTTP

This is what I'm trying to do, the first paragraph, Tunneling HTTP:
http://www.plenz.com/tunnel-everything
This is the error I get:

debug1: Connection to port 8118 forwarding to localhost port 8118 requested.
debug1: channel 1: new [direct-tcpip]
channel 1: open failed: connect failed: Connection refused
debug1: channel 1: free: direct-tcpip: listening port 8118 for localhost port 8118, connect from 127.0.0.1 port 43117, nchannels 2

/etc/ssh/sshd_config

Port huhuhu
ListenAddress 0.0.0.0
AllowUsers huhuhu huhuhu
Protocol 2
HostKey /etc/ssh/ssh_host_dsa_key
LoginGraceTime 2m
PermitRootLogin no
MaxAuthTries 6
PubkeyAuthentication yes
AuthorizedKeysFile    %h/.ssh/authorized_keys
PasswordAuthentication no
ChallengeResponseAuthentication no
X11Forwarding no
Subsystem    sftp    internal-sftp
Match User huhuhu
    ChrootDirectory /home/sftp
        AllowTcpForwarding no
    ForceCommand internal-sftp

/etc/ssh/ssh_config is default.

any idea?
TIA

Offline

#2 2010-12-15 09:56:53

graysky
Wiki Maintainer
From: :wq
Registered: 2008-12-01
Posts: 10,734
Website

Re: SSH: Tunneling HTTP

Here is mine.  You're just missing a few options with respect to tunneling:

$ sed -e '/^\#/d' -e '/^$/d' /etc/ssh/sshd_config
Port 10201
ListenAddress 0.0.0.0
Protocol 2
LoginGraceTime 30
PermitRootLogin no
MaxAuthTries 3
RSAAuthentication yes
PubkeyAuthentication yes
PasswordAuthentication no
PermitEmptyPasswords no
ChallengeResponseAuthentication no
UsePAM no
AllowAgentForwarding yes
AllowTcpForwarding yes
TCPKeepAlive yes
ClientAliveInterval 180
PermitTunnel yes
Subsystem    sftp    /usr/lib/ssh/sftp-server

Offline

#3 2010-12-15 10:01:32

looshfoo
Member
Registered: 2010-12-15
Posts: 5

Re: SSH: Tunneling HTTP

enable tcp forwarding

also you could just do ssh -D9999 user@yourhost and then set your proxy in firefox or whatever to localhost:9999 as socks5 and proxy that way. simplier and no other programs needed..

Offline

#4 2010-12-15 11:49:25

bangkok_manouel
Member
From: indicates a starting point
Registered: 2005-02-07
Posts: 1,557

Re: SSH: Tunneling HTTP

thanks a lot guys.

graysky, i'll try that.

looshfoo, thanks for the suggestion but in fact, this what I've been doing for years. i have to admit i could have been more --verbose in my first post. what i'm actually trying to do is to use privoxy on the remote server so ssh and privoxy have to be "chained".

Offline

Board footer

Powered by FluxBB