SSL VPN

John Priddy jpriddy at redhat.com
Thu Jun 19 12:14:34 UTC 2008


http://www.redhatmagazine.com/2007/11/27/advanced-ssh-configuration-and-tunneling-we-dont-need-no-stinking-vpn-software/



On Thu, 2008-06-19 at 08:08 -0400, John Priddy wrote:
> Yes, it's definitely possible to tunnel traffic through an established
> ssh connection.  Probably beyond the scope of what can be explained on
> the mailing list (not to mention, i have never actually set this up
> myself and would probably do a poor job of it compared to others on this
> list).  I would just search for 'ssh vpn tun'.  There's bound to be
> information out there by people that have done this at other non linux
> friendly vpn shops.  I have also seen people doing this to get around
> web filtering, monitoring, etc @work.
> 
> John
> 
> 
> On Thu, 2008-06-19 at 07:55 -0400, Rick Bilonick wrote:
> > On Thu, 2008-06-19 at 01:00 -0400, John Priddy wrote:
> > > ssh doesnt really have anything to do with ssl vpn or vpn in general for
> > > that matter.  im not sure i fully understand what your asking, but yes,
> > > you can tunnel traffic through ssh to other ports.  see the -L option of
> > > ssh.  of course the ssh port will have to be both open and forwarded
> > > from the router/firewall to the big bad internet.  opening up this
> > > pretty much defeats the purpose of a vpn/firewall architecture though.
> > > 
> > > On Thu, 2008-06-19 at 00:48 -0400, Rick Bilonick wrote:
> > > > On Thu, 2008-06-19 at 00:14 -0400, John Priddy wrote:
> > > > > Oh, forgot to mention -- if your vendor is on this list, try using
> > > > > 'vpnc':
> > > > > 
> > > > > http://www.vpnc.org/member-list.html
> > > > > 
> > > > > http://www.vpnc.org/
> > > > > 
> > > > > 
> > > > > There should be howtos on this all over the web.
> > > > > 
> > > > 
> > > > > > 
> > > > 
> > > > 
> > > > I'm just curious and maybe completely off base, but is there any way to
> > > > use ssh to contact the server if I first ssh out from the server?
> > > > 
> > > > Rick B.
> > > > 
> > > 
> > 
> > I guess I did not explain well. First, I ssh from the server (which is
> > behind a firewall) out to my home computer and leave this connection
> > open. Then when I go home, is there any way that I can use this
> > connection from home? That is, can I somehow tunnel back through from
> > home to the server over this connection? I may be totally off base, but
> > I thought I read somewhere that this could be done.
> > 
> > Rick B.
> > 
> 




More information about the fedora-list mailing list