3 ms·

Ok, not techically part of SSH itself but I think SShuttle[1] is one of the most awesome SSH tricks around. [1] https://github.com/apenwarr/sshuttle https://gi

by dotBen 15y ago

Ok, not techically part of SSH itself but I think SShuttle[1] is one of the most awesome SSH tricks around. [1] https://github.com/apenwarr/sshuttle https://github.com/apenwarr/sshuttle

sunyc 15y ago
too hard , you should just use -D and tsocks
- nieve 15y ago
  I'm surprised that you'd say that if you actually understand what sshuttle does and you've read the tsocks (8) manpage. The ssh -D/tsocks combination is significantly more fragile due it how SOCKS proxying works & potential LD_PRELOAD problems, doesn't work at all with static binaries, works only for programs started with the preload (sshuttle is system-wide), doesn't handle async sockets, has issues with DNS, and fails with programs that do syscall() directly. The tsocks solution also fails miserably for anything but the use case of "have this program act (mostly, sorta) like it's running on this other machine's network" and can only do all or nothing for a program, no discrimination based on routes or ip. If it's too hard to alias "./sshuttle -r user@ssh 0/0 -vv" I'm not sure you should be playing with sharp objects like LD_PRELOAD...
  - sunyc 15y ago
    What I say too hard, is saying this is way too much trouble for a problem that should be solved at another perspective. that is, fix the network or authorization problem.
- PHLAK 15y ago
  I put together a little script for just this purpose: https://github.com/PHLAK/Soxy https://github.com/PHLAK/Soxy
sgentle 15y ago
SShuttle is brilliant. For those who don't know/are skimming the comments, it's basically VPN built on SSH. You just sshuttle -r user@host 0/0 and all your outbound connections are now securely tunneled through that server. I mainly use it for watching Hulu and pretending I'm being oppressed by the government, but I suspect it's useful for other things too.

3 ms·

Ok, not techically part of SSH itself but I think SShuttle[1] is one of the most awesome SSH tricks around. [1] https://github.com/apenwarr/sshuttle https://gi

by dotBen 15y ago

Ok, not techically part of SSH itself but I think SShuttle[1] is one of the most awesome SSH tricks around. [1] https://github.com/apenwarr/sshuttle https://github.com/apenwarr/sshuttle

sunyc 15y ago
too hard , you should just use -D and tsocks
- nieve 15y ago
  I'm surprised that you'd say that if you actually understand what sshuttle does and you've read the tsocks (8) manpage. The ssh -D/tsocks combination is significantly more fragile due it how SOCKS proxying works & potential LD_PRELOAD problems, doesn't work at all with static binaries, works only for programs started with the preload (sshuttle is system-wide), doesn't handle async sockets, has issues with DNS, and fails with programs that do syscall() directly. The tsocks solution also fails miserably for anything but the use case of "have this program act (mostly, sorta) like it's running on this other machine's network" and can only do all or nothing for a program, no discrimination based on routes or ip. If it's too hard to alias "./sshuttle -r user@ssh 0/0 -vv" I'm not sure you should be playing with sharp objects like LD_PRELOAD...
  - sunyc 15y ago
    What I say too hard, is saying this is way too much trouble for a problem that should be solved at another perspective. that is, fix the network or authorization problem.
- PHLAK 15y ago
  I put together a little script for just this purpose: https://github.com/PHLAK/Soxy https://github.com/PHLAK/Soxy
sgentle 15y ago
SShuttle is brilliant. For those who don't know/are skimming the comments, it's basically VPN built on SSH. You just sshuttle -r user@host 0/0 and all your outbound connections are now securely tunneled through that server. I mainly use it for watching Hulu and pretending I'm being oppressed by the government, but I suspect it's useful for other things too.