Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Mon Jun 25, 2007 4:39 pm 
Offline
Senior Member
User avatar

Joined: Thu Jun 21, 2007 7:13 pm
Posts: 100
Website: http://neo101.org
My workplace block everything except port 80. How could I ssh from my work client computer into my linode server?

Putty wont work and neither will the ssh java client in webmin, since they both use port 22 for ssh access. Any ideas?

I don't want to install anything on the work client computer since the IT department does not allow me to. But there is IE7 and Java preinstalled.

I tried to configure my linode sshd to listen to port 80, but the connections seems to immediately be cut off.


Top
   
 Post subject:
PostPosted: Mon Jun 25, 2007 5:41 pm 
Offline
Senior Member
User avatar

Joined: Sat Mar 24, 2007 6:09 pm
Posts: 59
Location: South Africa
If they block everything outbound except port 80, it's very likely that they also transparently proxy (or protocol check) outbound connections on port 80.

If the outbound SSH connection doesn't conform to HTTP, it'll probably be blocked, even if it does use port 80.

If you use/need your Linode for work, ask IT to open up port 22 access for you. If it's for private use, whadda you doing accessing it from work? ;-)

Having said all that, have a look at tunneling SSH over HTTP:
http://www.mtu.net/~engstrom/ssh-proxy.php

--deckert


Top
   
 Post subject:
PostPosted: Mon Jun 25, 2007 5:46 pm 
Offline
Senior Member
User avatar

Joined: Sat Mar 24, 2007 6:09 pm
Posts: 59
Location: South Africa
Hi again...

One more comment: try making your SSH client listen on port 443 - many organizations only proxy port 80, while letting port 443 through for direct secure connections.

--deckert


Top
   
 Post subject:
PostPosted: Mon Jun 25, 2007 5:58 pm 
Offline
Senior Member
User avatar

Joined: Thu Jun 21, 2007 7:13 pm
Posts: 100
Website: http://neo101.org
Thanks for your advice, Deckert. I'll look into it next time I'm at work and report the result.


Top
   
 Post subject:
PostPosted: Mon Jun 25, 2007 7:21 pm 
Offline
Senior Member
User avatar

Joined: Tue Aug 17, 2004 11:37 pm
Posts: 262
Website: http://www.our-lan.com
WLM: nf@our-lan.com
Location: Brisbane, Australia
My work blocks everything apart form 80 and 443. So i have sshd running on 22 and 443 on my linode.
And then use putting to connect to the server on port 443, but make sure you specific your http proxy and set the right details up for it.

Works a treat where i am

_________________
ServerAdmin - www.our-lan.com
"Diplomacy is the art of saying nice doggy whilst looking for a really big stick"
"In my experiece, any attempt to make any system idiot proof will only challenge God to make a better idiot"


Top
   
 Post subject:
PostPosted: Tue Jun 26, 2007 5:31 pm 
Offline
Senior Member
User avatar

Joined: Thu Jun 21, 2007 7:13 pm
Posts: 100
Website: http://neo101.org
I tried to buy another ip for my linode node because I already run webmin on port 443. I configured the /etc/network/interfaces file (I run Debian Etch), restarted the server and typed "ifup eth1". It didn't work.

I tried "lspci -v" to see if there was more than one nic, but that didn't work either.

Does anyone know what I have to do to get my second ip up and running and sshd to listen at the second ip address on port 443, while at the same time let the first ip address continue to listen to webmin traffic, also on port 443?


Top
   
 Post subject:
PostPosted: Tue Jun 26, 2007 6:28 pm 
Offline
Linode Staff
User avatar

Joined: Tue Apr 15, 2003 6:24 pm
Posts: 3090
Website: http://www.linode.com/
Location: Galloway, NJ
http://www.linode.com/wiki/index.php/Multiple_IPs


Top
   
 Post subject:
PostPosted: Wed Jun 27, 2007 3:30 am 
Offline
Senior Newbie
User avatar

Joined: Wed Jun 27, 2007 3:25 am
Posts: 7
Website: http://www.virtualmin.com
Webmin also has a Command Shell which doesn't require any other ports. It's non-interactive, so not quite an answer. I'm working on an AJAX version which will be fully interactive, but it'll be a few weeks before that's anything resembling usable.

The SSL tunnels feature also won't work, if you don't have a free port.


Top
   
 Post subject:
PostPosted: Thu Jun 28, 2007 2:45 am 
Offline
Senior Member
User avatar

Joined: Thu Jun 21, 2007 7:13 pm
Posts: 100
Website: http://neo101.org
Thanks everyone. It works as intended now.
I configured /etc/network/interfaces according to the instructions at: http://www.linode.com/wiki/index.php/Multiple_IPs, altered /etc/ssh/sshd_config like this:

# Port 22
ListenAddress 64.22.109.86:443
ListenAddress 64.22.109.195:22

I ran /etc/init.d/ssh restart and it started to work. Well, maybe I restarted the server once also. I don't remember.


Top
   
 Post subject:
PostPosted: Thu Jun 28, 2007 5:40 am 
Offline
Senior Member

Joined: Fri Feb 18, 2005 4:09 pm
Posts: 594
Using zebedee (http://www.winton.org.uk/zebedee/)
you can tunnel any number of ports through port 443.

So for example, tunnelling 22 and 5900 lets me use
both SSH and VNC to my linode from work. Zebedee
compresses and encrypts packets, and encrypted
packets are *expected* on port 443 traffic, no problem.

The zebedee server listens on the linode, and I start/stop
a batch file on the Windoze side at the office to enable
the tunnel. Some of my fellow techno-dweebs at the
office emulate this process to access their home networks.

James


Top
   
 Post subject:
PostPosted: Wed Jul 04, 2007 9:47 am 
Offline
Senior Member

Joined: Sat Feb 10, 2007 7:49 pm
Posts: 96
Website: http://www.arbitraryconstant.com/
You could give AjaxTerm a whirl, and just set it up inside a (hopefully SSL'd) vhost in Apache.

http://antony.lesuisse.org/qweb/trac/wiki/AjaxTerm


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group