Konqueror & SSH Proxy

I'm trying to figure out how to get Konqueror (and as such all other K* apps) to work through my ssh proxy. The proxy itself works fine.
ssh -C -D 8080 myserver.com
Using this, I get a valid Socks5 proxy that firefox can use. I've done this with my Arch laptop and my Windows (putty) system at work. An IP check does show that the remote server thinks I'm at home.
I just can't figure out how to get this to work with Konqueror...it's frustrating and stuff....

QuimaxW wrote:I don't have any socks servers or clients installed, I've just been trying to do this with the ssh tunnel thing. I'll look through the AUR tonight for dante or NEC socks to see what I can find.
Dante is in the AUR, but setting it up is a huge pain in the ass. Read here for some interesting information: http://movingparts.net/2005/01/24/its-t … usability/
If you need to use ssh tunneling, Firefox works fine with ssh as a socks proxy, or you can wait until KDE4 goes primetime, as it has native socks built in, and will not rely on external socks programs. It will also (apparently) allow individual programs to use socks proxies, rather than the whole KDE suite.

Similar Messages

RDP client for iPad with SSH Proxy support

Looking for a client for iPad that supports SSH Proxy. Just like Jaadu RDP for iPhone. I need the SSH Proxy to do reverse SSH tunneling.
Regards
-- Daniel
Message was edited by: daniel4632
Message was edited by: daniel4632

Hi,
Would you please provide us the log file after reproducing the issue for further research.
Microsoft Remote Desktop -> About Microsoft Remote Desktop -> Send log via email
Thanks.
Jeremy Wu
TechNet Community Support

[solved] Problem setting up a dedicated ssh proxy user

I created a user which should only be able to create a ssh SOCKS tunel, with no shell access:
username: proxy
User ID: 1000 (or should it be 500?)
shell: /bin/cat
password: xxx
group: users
The problem is that when I try to ssh to it by
ssh proxy@ip -vvv
or set up a tunnel
ssh proxy@ip -D 9999 -vvv
I get asked for the password and when I give it, I get:
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
proxy@ip's password:
debug3: packet_send2: adding 64 (len 58 padlen 6 extra_pad 64)
debug2: we sent a password packet, wait for reply
debug1: Authentications that can continue: publickey,password
Permission denied, please try again.
I am positive the password given is correct.
Last edited by Lockheed (2014-06-20 10:05:15)

Add /bin/cat to /etc/shells

Editing vpn connection causes timeout error+ssh proxy error, related?

Using plasma5, nothing fancy in my setup.
When i try to edit openvpn connection initially connection window is all blank but the connection name. After a good while controls appear and im greeted with this message:
Also when i try to connect to ssh that uses proxy i get this:
~ % ssh server
Pass a valid window to KWallet::Wallet::openWallet().
The kwalletd service has been registered
Invalid DBus reply: QDBusError("org.freedesktop.DBus.Error.NoReply", "Message did not receive a reply (timeout by message bus)")
QDBusConnection: name 'org.kde.kwalletd5' had owner '' but we thought it was ':1.10408'
FATAL: Cannot get password for user: bit
ssh_exchange_identification: Connection closed by remote host
Proxy is configured as:
ProxyCommand connect -5 -S localhost:9050 $(tor-resolve %h localhost:9050) %p
Briefly i can see kwallet dialog asking for credentials but then it is replaced by ksshaskpass dialog asking for proxy password. When i start kwallet application window is basically frozen, can resize it only in small bits as if it was waiting on something for second or so and only processing GUI messages for a moment. After a while window can be resized easily but it is still blank, no controls, menus also get stuck until i terminate application forcibly.
Any idea what am i missing here?

Hi
There are many reasons for the error and they are as follows:
The user is behind a firewall that is blocking ports UDP 4500/500 and/or ESP.
The VPN client is using connecting on TCP and the default TCP port 10000 for NAT is blocked.
The internet connection is not stable and some packets are not reaching the ASA or the replies from the ASA aren’t getting to the client, hence the client thinks the server is no longer available.
The VPN client is behind a NAT device and the ASA doesn’t have NAT-T enabled. In this case the user will not be able to send or receive traffic at all. It will be able to connect but that’s all. After some time the software client deletes the VPN tunnel.
Suggested solutions:
If you are using wireless, try to connect with cable
Turn your firewall off, then test the connection to see whether the problem still occurs. If it doesn’t then you can turn your firewall back on, add exception rules for port 500, port 4500 and the ESP protocol in your firewall
Turn on NAT-T/TCP in your profile ( remember to unblock port 10000 in your firewall)
Edit your profile with your editor and change ForceKeepAlive=0 to 1

SSH proxy problem

Hi, I connected to my proxy box using the following
ssh usernam@ipadress -D 9292
I change internet option on firefox to socks host 127.0.0.1 port 9292
I can access almost everything except accessing video on fox.com and abc.com. Anybody knows why I can't access to those site. thanks

ssh -L port:localhost:port ipaddress
Thanks for the reply I see there are 2 port. why is that?
Why some web sites do not want to work through your SOCKS Proxy I do not know, but I do not think an ssh tunnel is the answer.
By the way I've used both ssh tunnels and ssh -D SOCKS proxies (although I have not used the ssh SOCKS proxy very much).
As to your question about why there are 2 ports in the ssh tunnel setup. An ssh tunnel establishes a path between a local port on your system and a remote port on another system. So using the following example:
ssh -L 5901:localhost:5900 remote.system.address
In this example, I'm setting up an ssh tunnel that allows the use of VNC across a secure connection (one of the more common uses of ssh tunnels).
5901 is the port anchoring the local system end of the tunnel. You would have your local client connect to this port. Again using VNC as the example, you would tell it to use localhost:5901 as the address you wanted it to connect with.
localhost in this example, basically says you are only using 2 systems and not a middle man ssh system (Most tunnels just use 2 systems and using localhost is the common way to specify this.
5900 is the port on the remote system you want to the tunnel to send all its traffic. Again using the VNC example, 5900 is the standard VNC server port, so anything you direct to your local port 5901 will be sent over the ssh tunnel to port 5900 on the remote system. And since a tunnel is a 2 way channel, anything the remote system returns on the open connection will be received by your local client (VNC in this example).
Now if, for example, you wanted to say connect to a usenet news server that your ISP provided, but only for connections within its network, you could establish a tunnel that changed that localhost to something else. For example:
ssh -L 119:news.myisp.net:119 my.home.system.address
Now I tell my news server I want to connect to localhost:119, but because I have establish an ssh tunnel listening on port 119, all traffic is sent to my.home.system.address over the tunnel. But since I also tool the tunnel that I wanted anything traveling over the tunnel to be forwarded on to news.myisp.net:119, my.home.system.address will take the stuff coming out of the ssh tunnel and send it on to news.mysip.net:119.
That is what the 2 port numbers are for. But I still think an ssh tunnel is not what you want, and I think your use of an ssh -D proxy is correct. It is just that something in the way fox.com and abc.com do video. Just my 2 cents.

SSH via a SOCKS proxy ?

I need to be able to make an ssh shell connection via a SOCKS5 proxy, and can't find out how to do it. It's possible to do this in putty on the PC, so I hope something similar is available for the Mac, whether it's a separate application or a way of configuring the ssh command.
Does anybody know how to do it ?

Hi Andrew,
   The command to whose source Andy provides a link is designed to be used as a ProxyCommand by Sun on Solaris systems. The web page, Hack 92 SSH SOCKS 4 Proxy discusses the use of built in SOCKS 4 proxy support in OpenSSH on OS X and claims at the bottom that built in SOCKS 5 support is in the works. I don't know the status of that effort.
   This post in the BSDForums.org, HTTP proxy auth for nc(1) offers a patch for NetCat that is purported to allow it to be used as a ProxyCommand for OpenSSH. The "connect" command can be used as a ProxyCommand and SSH via a Socks proxy on OS X with connect.c discusses how to compile and use it on OS X. More detail is provided at SSH Proxy Command -- connect.c but I'm currently unable to connect to the machine on which the source resides.
Gary
~~~~
   It's hard to get ivory in Africa, but in Alabama the Tuscaloosa.
         -- Groucho Marx

Ssh tunneling

Hi,
I have tried the following:
on PC1 (win xp) I have created ssh connection with port forwarding
(local 8888 to remote 8888) to server1.
From server1 I have created another ssh connection with portforwarding to server2(local 8888 to remote 1521).
When I try to connect to oracle instance on server2 from PC1, using this kind of tunneling I got an error:
Oracle Error :: TNS-12547
TNS:lost contact
Does anyone have some experience with this kind of tunneling or is this kind of tunneling is possible?
Thanks,
Goran

Perhaps this thread will help you with tunneling vnc through ssh. I have personally put a number of posts about doing this; you might try searching these forums on user "j.v." and search terms "VNC" and "tunnel" if you want to see some of the stuff I have posted.
As far as tunneling your web browser through an ssh proxy, I think the easiest way to do this is to get a second web browser like Firefox for all the proxy stuff, and set it up as a SOCKS5 to proxy to "localhost:1080" or whatever port. Then, when you make a ssh connection, add a "-D 1080" option to your ssh command that you issue at the client computer. In Terminal, type "man ssh" to learn more about the "-D" proxy tunnel option.

Mail.app 3.6 won't connect to my POP3 server over a proxy

I updated to 10.5.7 the other day, and now Mail.app will not connect to my POP3/SMTP server via my proxy. This is a big problem for me as I work remotely a lot.
My setup - I use Proxifier (www.proxifier.com) and an SSH proxy so I point my Mail.app at the 192.168.* local address of my POP3 server on my home network. Whether I'm physically on the 192.168.* network, or remote but running Proxifier, Mail.app 3.5/10.5.6 would work flawlessly, as would any other application that addressed my local network (e.g., RDC).
Since upgrading to Mail.app 3.6/10.5.7, however, Mail.app will not connect when I'm using the proxy, but works fine when I'm physically connected to that network; it thinks that the servers is offline (even when using the Connection Doctor). All other TCP/IP applications including RDC continue to work fine via proxy. In particular, I can still use "telnet 192.168.x.y 110" and connect correctly to my POP3 server (and interact with it using the POP3 command set), so the issue would appear to be in Mail.app rather than in the connection itselof.
Since Proxifier only proxifies TCP and not UDP connections, is it possible that Mail.app 3.6 now attempts a UDP connection to a mail server to check if it's alive before trying TCP? If that's the case, can it be disabled? I don't know of any requirement that POP3 servers must be able to respond to UDP. Or is there a way I can drop back to 3.5 which DID work?
Thanks. Jim.

OK, I understand this now (thanks to DHJ for help with experimentation).
1) Mail.app 3.6 appears to ignore /etc/hosts completely. Mail.app 3.5 honored definitions in /etc/hosts.
I tested this by putting the known IP address of pop.gmail.com into /etc/hosts and calling it foo - I could not receive mail by pointing Mail.app at the server foo.
If this is so, it needs to be documented. This is extremely unusual behavior for a network application. I can see why Apple may be trying to protect us from hosts-hijacking, but this non-standard behavior has eaten up a lot of our time trying to figure it out.
2) Mail.app 3.6 appears to use a system proxy if one is defined. Mail.app 3.5 did not.
I tested this by verifying that Mail.app 3.6 could receive my mail (modulo the problem in 1) above) when any system proxy was defined, regardless of whether Profixier was running.
Every other application I know that uses the system proxy gives you the option of doing this (e.g., Firefox, Adium, and so on). This is why my Proxifier application was seeing nothing - Mail.app was going right to the system proxy. (FYI, Proxifier is designed to support proxies for applications that have not already been written to support proxies explicitly.)
The combination of 1) and 2) presented as a totally wacky complex problem. Viewed separately they don't seem so difficult to diagnose. Either way, they are both surprising, unusual and, to my knowledge, undocumented.

Proxy Tunneling

My school that I am currently attending uses a proxy. Because of that proxy you cannot use internet based game without a program to tunnel through the proxy. I used to use a windows based computer at the school so I used the program Sockscap to tunnel through but they do not make a version for apple computers. Does anyone know of a program that can work as the same function? I've tried looking everywhere but have had no success.

OS X has this Proxies tab under Network in System
Preferences, does
that not work? It includes a SOCKS Proxy.
Yeah this isn't what he's asking for. That proxy
setting allows you to connect to the local proxy
server, which in this case is blocking the type of
network traffic he's trying to use (proxy servers are
generally used to control outbound network traffic,
to restrict access to certain content such as
Internet radio, newsgroups, etc).
So what type of proxy server are you connecting to?
If this is an ssh proxy (which it should be,
otherwise running an open proxy is a really
bad idea), then you can simply open up a terminal
window and type something like this:
ssh -D port_num [email protected]
Then in the network control panel, create a new
location (you could name it "Proxy Bypass" or
something) and change your proxy settings for that
location to use "localhost:port_num" -- port_num
being some unused port, i.e. 8001. Creating the
additional network location will allow you to use
these settings with your game, and switch back to
your school's proxy server for Internet access.
The ssh tunnel will re-route all outbound Internet
traffic through to your remote proxy server, which
will then relay it out to the Internet, effectively
bypassing your school's proxy server (assuming they
allow ssh traffic to pass through it).
1.42/80/1g Mini - 1.83MBP/2g/100g
7200rpm Mac OS X (10.4.7) Former Newton
OMP user.
That sounds like a good idea but how do i know which proxy settings i need. You recommended a port but what is the server?

Defending against ssh attacks

Hi all: We proxy ssh traffic to one of our SLES servers for
ssh tunneling purposes. We have disabled password
authentication and rely solely on rsa key authentication.
However, we still have a flood of ssh password guessing
traffic which I want to block.
One option I am looking at is to abandon the ssh proxy and
route all ssh traffic directly to the SLES box. Then on the
SLES box config iptables to allow only so many ssh login
attempts per minute per ip address. Alternately iptables
could be setup to permanently block ip addresses after so
many failures.
My question is this: Can a similar technique be employed on
our BM 3.9 server? I really don't want to have to screw
around with multiple firewalls!
Thanks, Chris.

I was hoping for something more automated. My current
thinking is to remove the ssh proxy and blindly forward all
ssh traffic to our SLES box. I can then use iptables and an
automated tool to do the heavy lifting.
>>> On 10/8/2009 at 3:24 PM, in message
<[email protected]>, Craig
Johnson<[email protected]> wrote:
> In article <4ACDDB6F.CE15.0032.0@N0_$pam.vrapc.com>, Chris
> wrote:
>> My question is this: Can a similar technique be employed
> on
>> our BM 3.9 server? I really don't want to have to screw
>> around with multiple firewalls!
>>
> BMgr/NetWare doesn't have the ability to put a threshold
> on connection
> attempts like that and block a source. You could, if it
> helps any, put
> in rules (or filter exceptions) that limit connections
> to a particular
> address or subnet.
>
> Craig Johnson
> Novell Support Connection SysOp
> *** For a current patch list, tips, handy files and
> books on
> BorderManager, go to http://www.craigjconsulting.com ***

External Hard Drive ejects during Time Machine Backup

I've read through all the troubleshooting pages that I thought had anything to do with this problem, but none of my error messages seemed to match. This is my first backup with Time Machine onto my external hard drive, and it never gets past about 60GB before deciding that the drive has improperly ejected itself and aborting the backup. The error message from my Time Machine Buddy is below:
Starting standard backup
Backing up to: /Volumes/Untitled/Backups.backupdb
Ownership is disabled on the backup destination volume. Enabling.
Backup content size: 147.2 GB excluded items size: 5.1 GB for volume Macintosh HD
No pre-backup thinning needed: 170.49 GB requested (including padding), 930.54 GB available
Waiting for index to be ready (101)
Copied 56.0 GB of 142.1 GB, 112101 of 886988 items
Error writing to backup log. NSFileHandleOperationException:*** -[NSConcreteFileHandle writeData:]: Device not configured
Error: (-50) SrcErr:NO Copying /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ge ms/net-ssh-1.1.4/lib/net/ssh/proxy/errors.rb to /Volumes/Untitled/Backups.backupdb/Eugenio Vargas Computer/2011-05-17-161101.inProgress/E6F5C3CB-75B8-41C4-B52E-138235EB4B34/Maci ntosh HD/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ gems/net-ssh-1.1.4/lib/net/ssh/proxy
Error writing to backup log. NSFileHandleOperationException:*** -[NSConcreteFileHandle writeData:]: Device not configured
Error: (-50) SrcErr:NO Copying /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ge ms/net-ssh-1.1.4/lib/net/ssh/proxy/http.rb to /Volumes/Untitled/Backups.backupdb/Eugenio Vargas Computer/2011-05-17-161101.inProgress/E6F5C3CB-75B8-41C4-B52E-138235EB4B34/Maci ntosh HD/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ gems/net-ssh-1.1.4/lib/net/ssh/proxy
Error writing to backup log. NSFileHandleOperationException:*** -[NSConcreteFileHandle writeData:]: Device not configured
Error: (-50) SrcErr:NO Copying /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ge ms/net-ssh-1.1.4/lib/net/ssh/proxy/socks4.rb to /Volumes/Untitled/Backups.backupdb/Eugenio Vargas Computer/2011-05-17-161101.inProgress/E6F5C3CB-75B8-41C4-B52E-138235EB4B34/Maci ntosh HD/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ gems/net-ssh-1.1.4/lib/net/ssh/proxy
Error writing to backup log. NSFileHandleOperationException:*** -[NSConcreteFileHandle writeData:]: Device not configured
Error: (-50) SrcErr:NO Copying /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ge ms/net-ssh-1.1.4/lib/net/ssh/proxy/socks5.rb to /Volumes/Untitled/Backups.backupdb/Eugenio Vargas Computer/2011-05-17-161101.inProgress/E6F5C3CB-75B8-41C4-B52E-138235EB4B34/Maci ntosh HD/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ gems/net-ssh-1.1.4/lib/net/ssh/proxy
Indexing a file failed. Returned 200 for: /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ge ms/net-ssh-1.1.4/lib/net/ssh/proxy, /Volumes/Untitled/Backups.backupdb/Eugenio Vargas Computer/2011-05-17-161101.inProgress/E6F5C3CB-75B8-41C4-B52E-138235EB4B34/Maci ntosh HD/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/ gems/net-ssh-1.1.4/lib/net/ssh/proxy
Aborting backup because indexing of file failed.
Other details:
My external drive is a WD 1TB drive. The partition for the Time Machine Backup is formatted as Mac OS Extended (Journaled), as is my Macintosh HD. The Partition Map Scheme on the external drive is GUID Partition Table.
I have tried reformatting the external drive for good measure, but this doesn't seem to solve any problems. I also tried searching for the file that the error message says NO Copying for (/System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/g ems/net-ssh-1.1.4/lib/net/ssh/proxy/...) but I'm unable to find the files. I can get as far as /System/Library/Frameworks, but can find no folder in Frameworks titled Ruby.
Please help.

The Ruby folder is probably hidden. That is why you don't see it.
You may want to add System/Library/Frameworks to the exempted sync list until you can figure out which file is causing this. You can do this by opening Time Machine Preferences ( > System Preferences > Time Machine) and clicking on Options…
After that click the small + key and browse to the folder you want to exempt from the sync. In your case: Macintosh HD > System > Library > Frameworks
Next hit the exclude button with the Frameworks folder highlighted.
Try your backup again and see if it fails.

Java Inflater problem decompressing Git packfile objects

I have a Git packfile that I have saved as a file from the git-upload-pack
command. I want to read through the packfile, decompressing each of the
objects. Each object is compressed in the packfile using zlib compression.
My little inflater procedure works fine for a tiny HelloWorld project. So, I
decided to mix it up a little and use the jEdit source for a larger test. I
am 99% certain the jEdit.git packfile itself is ok as I have passed it
through directly to eGit's Import using an SSH proxy and eGit unpacked it
just fine.
So, my inflater method decompresses the first 7 objects fine (a commit, a
couple of trees, and several blobs) and a cursory visual inspection of the
decompressed data seems fine. The eighth object becomes a problem, though.
It is a blob with the name build.xml that is 51,060 bytes decompressed
(looking at the original pre-git-pushed jEdit source). The actual file size
matches the decompressed data content size in the packfile object header.
The inflater procedure outputs the decompressed data to System.out for
visual inspection. Approximately the first 1/3 looks like the original
build.xml but after that, the output is garbled. The procedure continues
decompressing objects after the 8th, but garbled, object but it dies on the
9th object with an "unknown compression method" error.
So I created a new test inflater to focus only on decompressing the 8th
object. Simply opening the packfile, copying out the compressed data (7793
bytes), and inflating it yields the same 2/3 garbled xml.
As a further test, I then take the original build.xml file, compress it
using java's Deflater (yielding a 7793 byte array), and then inflate it
using my same procedure and it decompresses fine. All of the xml is
readable.
Now, I have tried several variations of an inflater procedure, including an
patchwork variation from jGit's WindowCursor.inflate method. But they all
yield the same garbled result for the compressed build.xml data.
Ideas?

oops. sorry!
          try {
               byte[] packFile = readFile("/Users/marcos/GitProxyCache/jedit.pack");
               //THE BELOW OBJECT DECOMPRESSES FINE
          //Object starts at index 8616
          //Type = 3, Decompressed size = 2248 (uses 2 extra size bytes)
               //byte [] packDataWindow = new byte[8000];
               //System.arraycopy(packFile, 8619, packDataWindow, 0, packDataWindow.length); //works
               //THE BELOW OBJECT FAILS TO INFLATE
               //IT CAUSES an "incorrect data check" error
          //Object starts at index 9470
          //Type = 3, Decompressed size = 51060 (uses 2 extra size bytes)
               byte [] packDataWindow = new byte[8000];
               System.arraycopy(packFile, 9473, packDataWindow, 0, packDataWindow.length); //does not work
               Inflater decompresser = new Inflater();
               decompresser.setInput(packDataWindow, 0, packDataWindow.length);
               byte[] result = new byte[60000];
               int resultLength = 0;
               resultLength = decompresser.inflate(result);
               String outputString = new String(result, 0, resultLength, "UTF-8");
               System.out.println(outputString);
               decompresser.end();
          } catch (Exception e) {
               e.printStackTrace();
          }

How to configure firefox 3.6 proxy through ssh terminal on ubuntu 8.04

I am trying to configure Firefox proxy through an ssh terminal (putty) on Ubuntu 8.04. There in no GUI for the terminal, so am using xvfb to simulate the display. However Firefox cannot open any website because the proxy is not set correctly
Here's what I tried.Edited a loadcustom.js file in
/usr/lib/firefox-3.6x/defaults/prefs
and added the lines
// tell firefox to load customized config file
pref("general.config.obscure_value", 0);
pref("general.config.filename", "firefox.cfg");
Then created a firefox.cfg file in
/usr/lib/firefox3.6x and added the lines
// Lock specific preferences in Firefox so that users cannot edit them
lockPref("app.update.enabled", false);
lockPref("network.proxy.http", "my-proxy.in-my-domain.com");
lockPref("network.proxy.http_port", 8080);
lockPref("network.proxy.type", 1);
lockPref("network.proxy.no_proxies_on", "localhost, 127.0.0.1, 192.168.1.0/24");
lockPref("network.proxy.share_proxy_settings", true);
lockPref("browser.startup.homepage", "http://www.google.com/");
This did not work for me. Any suggestions?

Never mind. I got it working now, I was editing at the wrong place I guess.
I had to add the settings in /usr/lib/firefox-3.6.17/defaults/pref/firefox.js and then restart Firefox. Here's what I added
pref("network.proxy.type", 4); to have Firefox auto-detect proxy settings.

Using ssh as an http proxy on Arch [SOLVED]

I read this article and would like to use a friend's debian box as a www proxy. I ssh'ed into it using the following command from my Arch box:
$ ssh user@ip -D 8000
As I understand it, his box is now acting as a SOCKS-type (pseudo)server. I configured firefox to use 'localhost' and port '8000' as a proxy but can't connect to any websites. I tried switching between SOCKS4 and SOCKS5 but with no effect. Is there a setting somewhere on my Arch box that would disallow this behavior (something in /etc/hosts.deny or the like)?
I know this works, because I did it before I started using Arch back when I had Ubuntu installed.
Thanks in advance!
Last edited by graysky (2009-07-30 21:06:04)

Thanks for the quick reply. I got it working:
$ ssh -D 8000 user@host
Now, in firefox, only add 127.0.0.1 to your SOCKS proxy line (and the correct port number). Now check the SOCKS4 radio box and clear the IP addy from the other proxy boxes. This works for me now, although I get the following error in the ssh window (but it still functions):
channel 4: open failed: administratively prohibited: open failed

[SOLVED] How cat I make an http proxy from ssh?

Hi.
I can tunnel to ssh server using this:
ssh -N -D $myport $user@$serverip
It's working good. I tunneled to the server.
But I have a problem!
the created proxy is a Socks v5 proxy. I want to create a http proxy how can i do it?
Thanks! I waiting for your answers...
Last edited by ojZim (2013-05-26 17:55:36)

Gusar wrote:
You can't. What you can do is run a local http proxy that uses the ssh-created Socks5 as parent. Example config for polipo:
daemonise=true
proxyAddress=127.0.0.1
proxyName=localhost
allowedClients=127.0.0.1
socksParentProxy=localhost:7777
socksProxyType=socks5
7777 is an example, use $myport there. The default polipo port is 8123, meaning apps should be configured to use localhost:8123 as proxy.
Thanks for your help! It's worked very good and my problem is solved.
For installing and configuration polipo, other users can read this:
https://wiki.archlinux.org/index.php/Polipo
Last edited by ojZim (2013-05-26 17:56:39)

Konqueror & SSH Proxy

Similar Messages

Maybe you are looking for