http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/ Engadget Comments for How-To: SSH tunnels for secure network access http://www.engadget.com/media/feedlogo.gif http://www.engadget.com en-us Copyright 2012 Weblogs, Inc. The contents of this feed are available for non-commercial use only. Blogsmith http://www.blogsmith.com/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/Mar 21st 2006 6:46PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.bitvise.com/tunnelier.html .

I've been using it for 2 years to make tunnels from my notebook and home machine to my work (sometimes you can't use VPN).]]>Mar 21st 2006 7:01PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
AlmostVPN is an ssh tunnel management application with a twist. This is what makes AlmostVPN different:

it packaged as Preference Panel, so you do not have to use yet another application to configure your tunnels
it employs launchd to control tunnels, so you do not have to have yet another application running while tunneling
it uses creative network configuration techniques to provide almost VPN like access to remote services, so you can keep using real IP addresses and port numbers while accessing service on the other side of your tunnels.
it provides simple way to mount remote volumes via SSH tunnel
it can import tunnel definitions from SSH Tunnel Manager and SSHKeychain applications]]>Mar 21st 2006 7:22PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
found at: http://www.leapingbytes.com/almostvpn (or at your favorite update site)]]>Mar 21st 2006 7:26PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
http://www.stopdesign.com/log/2005/02/07/secure-email.html

Sorry Windows users.]]>Mar 21st 2006 7:26PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
BLATANT PLUG!!!
http://www.vegabiztech.com/products/sslvpn/product.html]]>Mar 21st 2006 8:59PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
If you don’t want the hassle of completely setting up your own Cygwin environment and OpenSSH, you might look at copSSH. It is actively maintained and up to date as of this post.
You can find it from ITeF!x consulting:
http://www.itefix.no/copssh/
One note, I never successfully posted a message to their help forum. Again, I don’t know how important that is to anyone.

I used copSSH on my home computer for a while, but decided that I needed a full Cygwin install. It wasn’t very hard to get it setup by hand, though I did hit a few snags because I didn’t know anything about Cygwin when I started. copSSH will configure everything almost automatically, pulling users from Windows and using their passwords. Key encryption is not hard to set up, though.

I’ve been using the combination of Cygwin, openSSH, Privoxy, and Tor to tunnel all my internet use from an open computer at school to my PC in my apartment for about a month now. It slows the connection down a bit (Especially Tor, of course) but it’s been very stable.]]>Mar 21st 2006 9:43PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/Mar 21st 2006 9:55PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/Network connections, set up an advanced connection, accept incoming connections, (you can skip over the modems), allow virtual private connections. Then just set up "connection to the network at my workplace" using the same wizard.]]>Mar 21st 2006 10:01PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/Mar 21st 2006 10:07PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/Mar 21st 2006 10:25PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.damn.be/weblog/index.php/2005/09/28/connections-through-firewall-via-ssh-tunnel/

then when u want to get really secure, set-up public/private key auth:
http://bmonday.com/articles/653.aspx]]>Mar 21st 2006 10:51PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
AlmostVPN is good, very good. But it has one fatal flaw: It forces you to use hostnames and not IP addresses. Very irritating. Correct me if I am wrong.

To those that say "just use VPN", you miss the point. This is to have secure connections to a remote network that may not provide a VPN server (like your ISP). Also some networks (like my cellular data service) do not provide you with the real IP necessary for VPN.

For windows users, Putty includes the ability to set up tunnels as well.

I use a tool called "sshKeyChain" on my mac that both manages my ssh keys and establishes tunnels in the background for me.

Engadget missed (or skipped for simplicity) a key use for this tool: Accessing a resource on a remote LAN without a world visible IP. Let me give you my example with IP addresses changed to protect the innocent.

My company operates a CVS server that on the local LAN at the California office. This CVS server has a local IP not visible to the outside world. They also have an ssh server with a world visible IP. I work in Houston. With a ssh tunnel I can tunnel into the California office LAN and forward port 2401 on localhost to port 2401 on the CVS server. Voila, near VPN functionality without the hassle of VPN servers and clients.
David]]>Mar 21st 2006 11:25PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
Also there's a mistake in the diagram - it should read "TEH INTERNETS" not "THE INTERNETS"! :P]]>Mar 21st 2006 11:25PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/Mar 22nd 2006 12:23AMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
Also you can forward any remote machine on the remote network to a local port....

my tunnelling ability's pwn jo0. /me searches for page where engadget's computer failures stole this from.]]>Mar 22nd 2006 3:50AMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/Mar 22nd 2006 9:20AMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/Mar 22nd 2006 10:04AMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
Currently, I'm tunelling Firefox 1.5 (with DNS look up through the proxy), Trillian (for AIM, MSN, etc etc.), and remote desktop to two machines on the remote-side LAN. I have a Linksys NSLU2 with the UnSlung firmware running 4.3p2 OpenSSH on it...before that I was running OpenSSH for Windows on a Win2K server. Both have been flawless.

A security tip: If you can, change the default port that OpenSSH responds to. If you don't, you'll notice all kinds of nefarious Chinese hackers trying to break in. If you're up to it, you can also move to full private/public key-based authentication.]]>Mar 22nd 2006 12:41PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
There were a few prerequisites (pppd, etc) that I don't remember offhand, but after a couple of years, the script still works fine.

For this, you need to create a certificate and add it to your ~/.ssh/authorized_keys so that you won't need a password.

In this example, one internal network was 192.168.1.X and the other was 192.168.9.X. I also replaced my remote server's name with my.host.org, so that will need to be changed as well.

#!/bin/bash
/usr/bin/pty-redir /usr/bin/ssh -t -e none -o 'Batchmode yes' my.host.org /usr/sbin/pppd 192.168.9.1:192.168.1.1 > /tmp/vpn-device
sleep 5
/usr/sbin/pppd `cat /tmp/vpn-device`
sleep 5
/sbin/route add -net 192.168.9.0 gw 192.168.9.1 netmask 255.255.255.0]]>Mar 22nd 2006 3:40PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
http://www.linquist.net/geek/proxy]]>Mar 22nd 2006 4:30PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
Download Putty: http://www.chiark.greenend.org.uk/~sgtatham/putty/

Replace the "-p" with "-P"

Replace "ssh" with "plink"

Replace the "2025/localhost/25" with "2025:localhost:25"

]]>Nov 2nd 2007 1:21PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
http://aa.cs.uit.no/blog/20050528-email

(aa)]]>Mar 22nd 2006 5:44PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
Here's what my command looks like in terminal for OS X.

# killall ssh; ssh -c blowfish -D 1134 user@server.com -Nf

First I kill my previous tunnel since I don't want there to be any issues with ports being bound to previous connections. Then I use the Blowfish algorithm instead. My dynamic port is 1134 so I can send my web/im/mail traffic over this port. -Nf forks the tunnel into the background and doesn't allow you to issue any remote commands. This method may not work for POP3 since I haven't really tried because I am only using webmail these days. In any case, it's a very easy method to encrypt all your other traffic without having to determine remote/local ports.]]>Mar 24th 2006 1:23PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
Thanks,]]>Apr 2nd 2006 5:31PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
ssh -N -p 22 <SSH login>@<SSH/VNC server> -L 5900/localhost/5900

Or in SSH Tunnel Manager:

Name: VNC example
Login: <SSH login, e.g. will>
Host: <SSH/VNC server, e.g. fakemachine.org>
Port: 22

Local redirections:
Port: 5900 | LAN Host: localhost | Port: 5900

Then fire up Chicken of the VNC and add a connection:

Host: localhost
Display: 0
Password: <your VNC password>

The article mentions you can redirect traffic via a separate SSH server if the application server (e.g. VNC server, mail server) isn't running SSH. Say you want to VNC to an OS9 or Windows box sitting behind an SSH-enabled gateway, as in: http://sdtcon.sourceforge.net/images/sdt3.png

Run the command:

ssh -N -p 22 <SSH login>@<SSH server> -L 5900/<VNC server>/5900

Or in SSH Tunnel Manager:

Name: VNC via gateway
Login: <SSH login>
Host: <SSH server>
Port: 22

Local redirections:
Port: 5900 | LAN Host: <VNC server> | Port: 5900

Then VNC in as above.]]>Apr 4th 2006 5:35AMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://pigtail.net/LRP/printsrv/cygwin-sshd.html
]]>Jun 19th 2006 5:19PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
My port 25 is closed... Can this article help?

I read above you are referring to command... Where to execute these commands on windows? On command prompt?... I am really sorry... I am desperate to learn but seems this tutorial is too complex for me to understand...]]>May 24th 2009 7:25AMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/i would appreciate it!!!thanks....
my email is
carni_026@hotmail.com]]>Aug 16th 2006 8:40PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
The command I used:

ssh -v -L 7000:myappserver:8000 sshuser@mysshserver

The tunel's opened and I just connect my client app to port 7000 at localhost.

Are all of this things right??

Or Do I need to do something else?



]]>Jun 30th 2009 8:20PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.laptopbatteryclub.com/]]>Dec 2nd 2009 10:13PMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.networktunnel.net
Ssh Tunnel Easy is an innovative ssh tunneling software, it can make an encrypted ssh tunnel between your machine and ssh server host, then tunnel your program TCP connection automatically through this encrypted tunnel to data forwarded. It help you unblock and surf securely in the internet.

Main features
All in One
A simple all in one solution, you do not need a complex sockscap/firefox + autoproxy + myentunnel + putty combination, and only a few mouse click, all config completed. Auto reconnect, support https proxy and NTLM authentication.

Multi channel load balancing
Under normal circumstances, because the SSH server is limiting the number of simultaneous connections, if you have too much TCP concurrent connections in one tunnel, may be cause your SSH tunnel freeze. Therefore, Ssh Tunnel Easy use similar to IE's LCIE (Loosely-Coupled IE) multi-channel load-balancing technology to improve it. In other words, Ssh Tunnel Easy will automatically create multiple ssh tunnel, then your browser's tcp connections will automatically be distributed to each ssh channel average, so that each channel ssh connections will not be too much, solve this problem perfect, and it can also significantly speed up your browsing speed. ]]>Jan 19th 2010 1:44AMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.shopokey.com]]>Feb 27th 2010 3:28AMhttp://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
http://www.jklinephd.com/vnc_through_ssh/index.html

Jeff]]>Mar 4th 2007 6:44PM