Re: VPN via SSH (was Proxy Question)

2001-11-10 Thread Benjamin Scott
On Thu, 8 Nov 2001, Ham wrote: > Would a VPN using SSH be a viable system for say a school district? Probably not. PPP-over-SSH is really a kludge. Its singular advantage is that it uses mature, well-known components (PPP, SSH), and thus avoids the compatibility problems more common with newe

Re: VPN via SSH (was Proxy Question)

2001-11-08 Thread Ken Ambrose
> >Would a VPN using SSH be a viable system for say a school district? Amount > >of traffic per day would be relatively low. Several school districts > >looking to implement "technology plans", a phrase I really hate, which > >include VPNs. This is due to need to connect several schools in a sec

Re: VPN via SSH (was Proxy Question)

2001-11-08 Thread Karl J. Runge
On Thu, 8 Nov 2001, "Joshua S. Freeman" <[EMAIL PROTECTED]> wrote: > > is there any place you can point newbies to that discusses the > subtleties of port redirection on Linux? > > (or any other OS, for that matter) These may be a good start. Port redirection is a method used in all of them, yo

Re: VPN via SSH (was Proxy Question)

2001-11-08 Thread Ham
> >Wot!? Only a pantywaist would tunnel PPP thru ssh! Real-men (and Real-women, > >e.g. my wife :-) build their own VPN's with ssh and a whole lotta port > >redirs (web, shells, X, vnc, ...). Inelegant, yes, but it works around > >a number of the the other VPN issues (IPs, routing, DNS, ...)

Re: VPN via SSH (was Proxy Question)

2001-11-08 Thread Paul Lussier
In a message dated: Thu, 08 Nov 2001 10:49:10 PST "Karl J. Runge" said: >Wot!? Only a pantywaist would tunnel PPP thru ssh! Real-men (and Real-women, >e.g. my wife :-) build their own VPN's with ssh and a whole lotta port >redirs (web, shells, X, vnc, ...). Inelegant, yes, but it works aroun

Re: VPN via SSH (was Proxy Question)

2001-11-08 Thread Joshua S. Freeman
is there any place you can point newbies to that discusses the subtleties of port redirection on Linux? (or any other OS, for that matter) J. On Thu, 8 Nov 2001, Karl J. Runge wrote: > On Wed, 7 Nov 2001, Ken Ambrose <[EMAIL PROTECTED]> wrote: > ... > > policy violation), is VPN via SSH. Hone

Re: VPN via SSH (was Proxy Question)

2001-11-08 Thread Karl J. Runge
On Wed, 7 Nov 2001, Ken Ambrose <[EMAIL PROTECTED]> wrote: ... > policy violation), is VPN via SSH. Honest-to-goodness VPN, that is, no > pansy port-redirection. Wot!? Only a pantywaist would tunnel PPP thru ssh! Real-men (and Real-women, e.g. my wife :-) build their own VPN's with ssh and a

Re: VPN via SSH (was Proxy Question)

2001-11-07 Thread Benjamin Scott
On Wed, 7 Nov 2001, Ken Ambrose wrote: > [Note: if anyone can clue me in on how to execute arbitrary code from the > /etc/sysconfig/network-scripts/ifup-ppp file, I'd be greatly appreciative; > for some reason, it just seems to elude me.] /etc/sysconfig/network-scripts/ifcfg-$NAME Defines

VPN via SSH (was Proxy Question)

2001-11-07 Thread Ken Ambrose
On Wed, 7 Nov 2001, Mansur, Warren wrote: > Of course, if you allow any port through, anyone can use ssh, connect to > their home computer, and do whatever they want. I suppose if they use > packet filtering so that they make sure only a subset of packets go > through, that would screw ssh up.

RE: Proxy Question

2001-11-07 Thread Mansur, Warren
> Gee... sounds like Microsoft Proxy Server! Or "Internet Security and >Acceleration Server" as it is called in its latest incarnation. Well, how ever did you guess? Must be psychic! > Keep in mind, any or all of these may violate corporate >policy. In some >places, such things can get you

Re: Proxy Question

2001-11-06 Thread Karl J. Runge
On Tue, 6 Nov 2001, Benjamin Scott <[EMAIL PROTECTED]> wrote: > > So, here's one solution I thought of. Perhaps I could have a my own > > proxy server, which when asked for a page, would go over port 22 (the > > ssh port) to my home computer. > > They block 80, but allow 22? That's... interes

Re: Proxy Question

2001-11-06 Thread Benjamin Scott
On Tue, 6 Nov 2001, Mansur, Warren wrote: > The http proxy server where I work is absolutely > terrible. Half the time it reports that the page timed out, and most of > the time I have to go to the page twice to get it to load. Gee... sounds like Microsoft Proxy Server! Or "Internet Security

Re: Proxy Question

2001-11-06 Thread Karl J. Runge
Yes, something like: myworkbox> ssh -L 8080:localhost:8001 myhomebox.net on your work machine. Log in and leave the shell open. Set Netscape proxy to "myworkbox:8080". Assumes proxy at home is on localhost (same machine as running sshd) and listening on port 8001. Modify to your setup. HTH

Proxy Question

2001-11-06 Thread Mansur, Warren
Hi, I'm sure someone has run into this problem, so hopefully someone will have a good solution. The http proxy server where I work is absolutely terrible. Half the time it reports that the page timed out, and most of the time I have to go to the page twice to get it to load. I'm not in a posit