SSH Tunneling and HTTP Port Forwarding

September 25, 2007 at 9:18 am

I subscribed to the cotse.net proxy and it’s working well so far. It’s very fast for a proxy… I’m definitely impressed.

To use it (after signing up for an account) you just download an ssh client, such as PuTTY, and configure it to not only connect to cotse’s ssh server, but also to hold open an ssh tunnel from a local port on your computer to the port on theirs. You can then tell firefox or IE to use your local port as a proxy server (this is all really easy to do), so all your traffic goes through this hardcore encrypted tunnel.

If you want to hide your internet traffic, this is the way to do it.

From wikipedia:

SSH is frequently used to tunnel insecure traffic over the Internet in a secure way. For example, Windows machines can share files using the SMB protocol, which is not encrypted. If you were to mount a Windows filesystem remotely through the Internet, someone snooping on the connection could see your files.

So to mount an SMB file system securely, one can establish an SSH tunnel that routes all SMB traffic to the fileserver inside an SSH-encrypted connection. Even though the SMB traffic itself is insecure, because it travels within an encrypted connection it becomes secure.

A few articles on tunneling and port forwarding:
http://www.oreillynet.com/pub/a/wireless/2001/02/23/wep.html
http://www.securityfocus.com/infocus/1816