Index

Subject : Re: LUG: Question about web proxies

From : Brian Cottingham <spiffytech@gmail.[redacted]>

Date : Sat, 13 Mar 2010 00:10:55 -0500

Parent


I say "at best" because inbound connections destined for [my computer] must be made with non-standard ports, depending on what services the proxy is already running and how many machines will proxy through it. This may be satisfactory for you.

A quick test got this working for me:

ssh -L *:9999:dest_computer:22 dest_computer

This forwards all inbound traffic to your proxy on port 9999 to your destination computer on port 22.

Forwarding traffic away from dest_computer is a little trickier"
Using "-R" activates a reverse port forward:

ssh -R *:9999:dest_computer:22 dest_computer

This command will tell dest_computer to forward any traffic on port 9999 to your proxy's port 22. I expect you'd need to combine this with iptables to actually forward the traffic onward to the internet. I'm not in a position to test this part.

More detailed information can be found here"
http://www.securityfocus.com/infocus/1816

-Brian


On Fri, Mar 12, 2010 at 11:34 PM, Daniel Underwood < daniel.underwood@ncsu.[redacted] > wrote:
> At best, you could configure OpenSSH on the proxy to forward incoming traffic on specific ports to [my computer].

Why do you say "at best"?  That sounds like precisely the solution (if
I'm understanding you correctly).
--
Daniel Underwood
North Carolina State University
Graduate Student - Operations Research
email: daniel.underwood@ncsu.[redacted]
phone: XXX.302.3291
web: http://www4.ncsu.edu/~djunderw/