Nice video, very interesting. BTW: on macOS you can install Proxychain via Homebrew with:
brew install proxychains-ng and call it with "proxychain4 firefox". > Am 18.08.2023 um 17:02 schrieb Lonnie Abelbeck <[email protected]>: > > Hi Michael, > > I don't have any personal experience to share, but Tom Lawrence has a related > video [1] > > Youtube: SSH Jump Server Access and How To Pivot Using OpenVPN & Proxychains > > I suspect this could all be done with SSH+SOCKS (Proxychains) and no OpenVPN > tunnel as his example does. > > Key takeaways are to encrypt the Jump Server's drive (and backup), keep it > local and secure from the internet, limit remote AstLinux SSH access via its > firewall and Jump Server ssh key. > > > Alternatively, some sort of automation to keep the remote AstLinux SSH keys > updated from one hardened location. > > Lonnie > > [1] https://www.youtube.com/watch?v=jqudlmfG0zA > > > >> On Aug 18, 2023, at 2:17 AM, Michael Knill >> <[email protected]> wrote: >> >> Hi All >> >> Here is the issue: >> We access devices behind Astlinux currently using SSH Tunnelling and SOCKS. >> It works well however it is becoming increasingly difficult in managing >> local authentication to do this such as using SSH Keys. >> We are going to be bringing on additional staff and I don’t want to have to >> go into every system to add credentials or keys every time we bring on a new >> staffmember. >> >> Just wondering if there are any options for external authentication of SSH >> rather than local on Astlinux e.g. using RADIUS >> Could there be any other options e.g. HTTPS proxy? >> >> Regards >> >> Michael Knill >> Managing Director >> >> D: +61 2 6189 1360 >> P: +61 2 6140 4656 >> E: [email protected] >> W: ipcsolutions.com.au >> >> <image001.png> >> Smarter Business Communications >> >> _______________________________________________ >> Astlinux-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/astlinux-users >> >> Donations to support AstLinux are graciously accepted via PayPal to >> [email protected]. > > > > _______________________________________________ > Astlinux-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/astlinux-users > > Donations to support AstLinux are graciously accepted via PayPal to > [email protected]. Michael http://www.mksolutions.info _______________________________________________ Astlinux-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to [email protected].
