SSH Proxy Command - connect.c. Is the simple relaying command to make network connection via SOCKS and https proxy. It is mainly intended to be used as proxy command of OpenSSH. You can make SSH session beyond the firewall with this command, Features of are:. Supports SOCKS (version 4/4a/5) and https CONNECT method.

Related pages: SSHThroughHTTPProxy

In today's cruel networked world, we're too often hampered behind (evil)company proxies that restricts how we can use the internet while at work, at acustomers' place or even in some cases while at home or at friends'.

Not only do proxies restrict what you can do, what protocols that are accepted, what sites you can visit and what TCP ports that are let through, it also allows your company or friend to log and supervise you.

Note that even when you use HTTPS through the proxy, the server name is exposed so a logging proxy will see what HTTPS servers you connect to.

I'll show you some easy steps that help you circumvent the boundaries of most proxy setups, and that also will bring you more freedom and prevent peeking eyes to investigate your browsing habits!

You need software installed and running in a location outside of where you are. I call that place 'home' in this document.

The place you want to get out from is what I call 'work' in this document. At 'work' you're behind the evil proxy.

You need a HTTP proxy running, and you really only need it toaccept connections to proxy from localhost. Lots of people already have anApache running and making it load the proxy module and configure it forlocalhost is very easy and quickly done. Of course you can opt for anotherproxy software, such as squid if you prefer that. In this example, we assumethat the proxy runs on port 80 - the same as the typical apache install uses.

You may want to enable HTTPS and FTP and other protocols in the proxyconfig.

You need sshd running on port 443. Almost everyone already havesshd running already, you just need to make it also listen for connections onport 443. 443 is typically used for HTTPS and that's why we use it - mostproxies are configured to allow connections to 443 since companies want toallow their employees to be able to use banks and other HTTPS web services onthe net.

Perhaps needless to say, but you must make sure that your Apache or otherhttpd server doesn't use the 443 port for HTTPS.

You need an SSH client that can issue CONNECT requests through thecompany HTTP proxy. If you're on Windows, using Putty is fine asit has built-in support for tunneling through a HTTP proxy. If you're onunix/linux (or cywgin) you can use openssh with corkscrew to go through the proxyto your home computer's port 443.

If using openssh, you'd add the following line to your~/.ssh/config file:

ProxyCommand /usr/local/bin/corkscrew proxy.work.com 80 %h %p

You config the ssh client to port-forward a local port, say 8080,to the remote's localhost:80. Now you have a channel established to your homecomputer, over a securely encrypted connection. Of course you also get a SSHlogin and you can start your X-programs from home to pop up at work etc..

The openssh command line to connect and port-foward the proxy could then look like this:

ssh -L 8080:localhost:80 user@server.at.home -p 443

Configure your browser at work to use 'localhost:8080' as proxy, forall the protocols you have enabled in your proxy at home.

All subsequent browser requests are then sent over the SSH connection,through the proxy, to the ssh server at home and from there to your proxy, andout in the world..

Instead of running a HTTP proxy at home to reach the internet with, you canuse the tunnel as a SOCKS proxy. This basically allows you to not run anythingat all at home apart from the ssh server.

If you have openssh in both ends, you can opt to use this simpler approach. Itlets you fire up the tunnel to your home machine and use that tunnel as aSOCKS proxy rather than using a HTTP one at the other end of the tunnel. Thisway, you don't need to run any other software at home than the ssh serveritself.

You can start up the tunnel/SOCKS proxy from the work side by issuing acommand like:

ssh -D 8080 user@server.at.home -p 443

You may still need the 'ProxyCommand' line mentioned above to make sure yourssh client can reach your ssh server at home.

Subsequently, you need to configure your work browser to use the SOCKS proxynow running at localhost port 8080.

For cases when CONNECT is not allowed to port 443 of your home computer, youcan of course try another port - if any at all are allowed, and then you mayneed to move your proxy/web server from 80 if that's the only way for you.

If you cannot find any useful port or if CONNECT is not allowed at all,you need to establish a tunnel using normal HTTP, using for example httptunnel.httptunnel is a client/server application, and you want the server ('hts') torun on your home computer, listening on port 80, and you run the client('htc') on your work computer setting up the tunnel.

At home, take an incoming connection on port 80 and forward it to port 22 (ssh):

At work, connect to home over the company proxy and forward a local port (8022in this example) to SSH to home over:

For other protocols you can of course just make sure that your work-sshsession forwards more ports to your home machine. It then differs between theprotocols how you get them to work. If you want to IRC at work through thissetup, you need a 'IRC bouncer' (like muh)running on your home machine since IRC cannot work properly otherwise.

For cases when your work doesn't actually lock you behind a proxy, you canstill use this approach (although you can skip the part with doing CONNECT andyour home computer doesn't have to run ssh on port 443) to prevent your workadmins from snooping on your network traffic.

Changelog: I added the SOCKS proxy details in June 2010.

Updated: February 20, 2020 08:50 (Central European, Stockholm Sweden)

We specialize in secure remote access software for Windows. Our main products are Bitvise SSH Server and SSH Client, which we try to make the best SSH client and server for Windows.

Our SSH Server provides secure remote access to Windows servers and workstations. Security is our SSH server's key feature: in contrast with Telnet and FTP servers, Bitvise SSH Server encrypts data during transmission. Thus, no one can sniff your password or see what files you are transferring when you access your computer over SSH.

Bitvise SSH Server is ideal for remote administration of Windows servers; for secure file transfer by organizations using SFTP and SCP; for advanced users who wish to access their home machine from work, or their work machine from home; and for a wide spectrum of advanced tasks, such as securing other applications using SSH TCP/IP tunneling.

You are looking for an SSH server if you want to set up a computer to receive connections from other people and their computers. If you want to initiate connections or file transfers, you are looking for an SSH client.

You can try Bitvise SSH Server free for up to 30 days.

Our free and flexible SSH Client for Windows includes state of the art terminal emulation, graphical as well as command-line SFTP support, an FTP-to-SFTP bridge, powerful tunneling features including dynamic port forwarding through integrated proxy, and remote administration for our SSH Server.

Smart Converter Pro provides a faster, higher quality conversion than most existing converters.FeaturesSimple to use - drag, drop, and click convert - Smart Converter Pro looks after the rest.Batch processing - queue up and convert as many files as you like in one go.Supports 100s of media formats. The 2.0.0.8 version of Smart Converter is provided as a free download on our website. Our antivirus check shows that this download is safe. The most popular versions of the software 1.9, 1.8 and 1.7. The most frequent installation filenames for the program include: SmartConverterWPF.exe, smartcon.exe and SmCoordConverter.exe etc. Smart Converter Pro 2 also includes auto-updating on the Shedworx version so that you will always be up to date. The combination of these new features makes Smart Converter Pro 2 the killer app for video converting on the Mac. We created the video converter that we always wanted and now we can't live without it. 9/10 - Download Smart Converter Mac Free. With Smart Converter for Mac, no video formats will be able to put up a fight. Download Smart Converter and easily convert videos by dragging and dropping. Smart Converter is possibly the fastest and easiest-to-use video format converter available for Mac. Smart Converter Pro 2.4.2 - Batch convert video simply and efficiently. Download the latest versions of the best Mac apps at safe and trusted MacUpdate. Smart converter pro catalina.

You are looking for an SSH client if you wish to initiate connections or file transfers to someone else's computer. If you are looking to receive connections, you are looking for an SSH server.

Bitvise SSH Client can be used free of charge in environments of any type.