3 ms·
Dumb question, but couldn't you just tell the OpenSSH server to use port 80 or port 443 or something and just connect like `ssh me@host -p 80`?
by tombert 3y ago
Dumb question, but couldn't you just tell the OpenSSH server to use port 80 or port 443 or something and just connect like `ssh me@host -p 80`?
- charcircuit 3y agoThat just changes the port it uses. It wouldn't change the protocol.
- tombert 3y agoFair, I guess I was not sure if it was just blocking the port, or doing something to directly block the protocols as well.
- charcircuit 3y agoThe author values having a robust solution since he mentions the DPI resistance near the end of the article. If he was going to mask ssh as https, he might as well do it properly.
- hddqsb 3y agoYes, that's likely to work on many firewalls, but: - it means you can't also serve HTTP on those ports (so you'd need a dedicated IP address for SSH), and - as @charcircuit wrote, it won't resist deep packet inspection. (But if DPI is a problem and you have a spare IP address, you could just use SSH over TLS without needing the HTTP CONNECT stuff and Apache.)