4 ms·
My personal favourite: - Get a cheap development box (Linode, Slicehost, etc.) - Set Firefox to use Socks Host 127.0.0.1:8080 - Open up your terminal and ent
by herrherr 16y ago
My personal favourite:
- Get a cheap development box (Linode, Slicehost, etc.)
- Set Firefox to use Socks Host 127.0.0.1:8080
- Open up your terminal and enter this: ssh -C2qTnN -D 8080 your-user@example.com
Et voilà, you're tunneling all your browser traffic through the development box.
- timf 16y agoIf your intent is to hide what you're doing from your LAN/ISP, there is a snag with Firefox. It will leak DNS requests locally unless you go to about:config and set "network.proxy.socks_remote_dns" to "true"
- deleted 16y ago[deleted]
- vimalg2 16y agoYes, its a useful trick I often use. However, does anyone know if Chromium or Opera can do the same DNS request tunnelling? (Firefox+Linux is sluggish for me.)
- sesqu 16y agoI'm pretty sure Chrome, at least, doesn't support SOCKS yet at all. I was trying to make a shell script just the other day that would set up a SSH SOCKS proxy to a remote box and launch a browser using it, but couldn't do it from the command line in either Firefox or Chrome (didn't try a custom profile). Furthermore, I couldn't get it working in Chrome at all (shame; Firefox is more sluggish, and Opera won't even start on my box).
- nl 16y agoChrome (under both Windows & Linux - not sure about OS X) can use SOCKS - I use it regularly. I'm unsure how to make it do remote DNS look-ups though. Opera cannot do SOCKS.
- pyre 16y agoOne problem with Chrome is that its proxy config interface really is just interfacing with the GNOME desktop-wide proxy settings. So it's impossible to have Chrome use multiple proxies or to only have one instance of Chrome use a proxy, but another instance not -- even if both instances have completely separate user data directories -- and all proxy changes are instantaneous across all Chrome instances. (At least for Chromium 5.0.391.0 on Linux)
- tomjen3 16y agoTry the proxy switchy extension - it should at least make it very fast to switch proxies.
- sesqu 16y agoYeah, I got it to work now, thanks to google. Hadn't realized that it needs a) a new session and b) an environment variable set. function remotebrowse() { export SOCKS_SERVER=localhost:5432 ssh -fNTD 5432 remote google-chrome --user-data-dir=/tmp/chrome $1 & } I get some error messages, but it seems to work.
- uxp 16y agoChrome on OS X can use SOCKS, but not explicitly for Chrome, since the operating system manages the connections under System Preferences > Network > Advanced > Proxies.
- igravious 16y agoI'm not sure what you're aiming at here. Could someone explain in plain English what's happening here and why this might be useful? Thanks.
- Mc_Big_G 16y agoBasically, you are sending and receiving all of your web traffic through an encrypted connection to a remote computer. A typical use for this is when you are connected to a foreign network like a hotel. If you don't route your http traffic over ssh, there is a risk of having your traffic sniffed and/or recorded.
- herrherr 16y agoYou could also (theoretically, haven't tested it all): - watch Hulu, when you're not in the US - use Spotify when you are in the US (and you use a UK box for example) - bypass your university firewall - in general secure your connection in case you are using an open network
- technomancy 16y agoActually I'm pretty sure the Adobe Flash plugin will ignore your proxy settings, so it will only work with actual web sites.
- nl 16y agoThis isn't true - I use a proxy tunnel frequently, and Flash works fine.
- bhattisatish 16y agoFlash works but it uses the default system connection and not your browsers proxy connection. So in cases of site that have IP based restriction, flash based sites will still see your original IP
- 16y ago
- nl 16y agoEven better, run the SSH server on port 443. Then you'll be able to tunnel though most corporate firewalls.
- fungi 16y agoi do it every day, works out easier for the IT dept then configing the network for ppl like me... but if you are not on good terms with the IT dept its a good way to lose your job, tread carefully.
- evaryont 16y agoEven better: Use SSLH[1], so you can still have an HTTPS server, but also connect to ssh on port 443. Set it up myself and my boss still doesn't know.. :) [1]: http://www.rutschle.net/tech/sslh.shtml http://www.rutschle.net/tech/sslh.shtml