Shoutbox

ssh, putty not flexiable enough - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Tech Talk (/forumdisplay.php?fid=17)
+----- Thread: ssh, putty not flexiable enough (/showthread.php?tid=87616)

ssh, putty not flexiable enough by Jarrod on 12-05-2008 at 11:01 PM

ok so if we discard all my other threads i'll just get to the point,    i need an ssh client that allows me to define every parameter for the connection, i need to be able to use a http proxy with ntlm or a user/pass, i also need dynamic port forwarding and it needs to run on windows,
i have tried
putty + plink and it doesn't allow me to define the http proxy, and i would like to beable to change it.
tunnelier almost the opposite of putty, it supports the http proxy but doesn't let you setup port forwarding from the command line
and i have tried conch from the twisted internet framework and windows doesn't support the crypt module
so anyone know of some really good ones?


RE: ssh, putty not flexiable enough by ShawnZ on 12-05-2008 at 11:39 PM

dude, you seriously need to rethink how you're doing this.

you're using an http proxy to connect to an ssh server to use dynamic tunnelling.

why not just set up a proxy server on the ssh server?


RE: ssh, putty not flexiable enough by Jarrod on 12-06-2008 at 12:08 AM

quote:
Originally posted by ShawnZ
dude, you seriously need to rethink how you're doing this.

you're using an http proxy to connect to an ssh server to use dynamic tunnelling.

why not just set up a proxy server on the ssh server?
because the proxy server is the only way out of the network into the internet,
i can do it if a define everything in the putty gui, but i want to avoid it and use command line
RE: ssh, putty not flexiable enough by ShawnZ on 12-06-2008 at 12:18 AM

quote:
Originally posted by Jarrod
because the proxy server is the only way out of the network into the internet,
i can do it if a define everything in the putty gui, but i want to avoid it and use command line

right, but why not just use a proxy server instead of an ssh server if you're just using it for tunneling?
RE: ssh, putty not flexiable enough by Jarrod on 12-06-2008 at 01:40 AM

quote:
Originally posted by ShawnZ
right, but why not just use a proxy server instead of an ssh server if you're just using it for tunneling
because it would be too easy,
it doesn't work like that anyway if it did we would have done it anyway
RE: ssh, putty not flexiable enough by ShawnZ on 12-06-2008 at 01:41 AM

sure it does!


RE: ssh, putty not flexiable enough by Jarrod on 12-06-2008 at 01:55 AM

quote:
Originally posted by ShawnZ
sure it does!
care to explain?
i don't see how
RE: ssh, putty not flexiable enough by ShawnZ on 12-06-2008 at 02:25 AM

quote:
Originally posted by Jarrod
quote:
Originally posted by ShawnZ
sure it does!
care to explain?
i don't see how

uh, just... set up a proxy and.. use it how proxies were designed to be used?
RE: ssh, putty not flexiable enough by Jarrod on 12-06-2008 at 02:28 AM

u can't do that with authenticating on the proxy/gateway first:P


RE: ssh, putty not flexiable enough by ShawnZ on 12-06-2008 at 03:41 AM

you mean connect to a proxy through another proxy? sure you can...


RE: ssh, putty not flexiable enough by Jarrod on 12-06-2008 at 03:42 AM

quote:
Originally posted by ShawnZ
you mean connect to a proxy through another proxy? sure you can...
even then the traffic still goes through the outbound proxy with the web filter on it
RE: ssh, putty not flexiable enough by ShawnZ on 12-06-2008 at 03:43 AM

quote:
Originally posted by Jarrod
quote:
Originally posted by ShawnZ
you mean connect to a proxy through another proxy? sure you can...
even then the traffic still goes through the outbound proxy with the web filter on it

so you're saying the web filter that you're trying to avoid is capable of looking into proxies, but not ssh tunnels?
RE: ssh, putty not flexiable enough by wj on 12-06-2008 at 04:58 AM

quote:
Originally posted by ShawnZ
quote:
Originally posted by Jarrod
quote:
Originally posted by ShawnZ
you mean connect to a proxy through another proxy? sure you can...
even then the traffic still goes through the outbound proxy with the web filter on it

so you're saying the web filter that you're trying to avoid is capable of looking into proxies, but not ssh tunnels?

SSH Tunnels are encrypted, While the proxy can probably see the tunnel, it cant tell what is in it.

Have you tried DNS Tunneling? http://www.daemon.be/maarten/dnstunnel.html It might suffice better then what you are trying to do.


RE: ssh, putty not flexiable enough by TheSteve on 12-06-2008 at 05:41 AM

Could OpenVPN be a possible option?

It appears to support NTLM HTTP proxies.


RE: ssh, putty not flexiable enough by Jarrod on 12-06-2008 at 06:11 AM

quote:
Originally posted by ShawnZ
quote:
Originally posted by Jarrod
quote:
Originally posted by ShawnZ
you mean connect to a proxy through another proxy? sure you can...
even then the traffic still goes through the outbound proxy with the web filter on it

so you're saying the web filter that you're trying to avoid is capable of looking into proxies, but not ssh tunnels?

exactly
quote:
Originally posted by wj
quote:
Originally posted by ShawnZ
quote:
Originally posted by Jarrod
quote:
Originally posted by ShawnZ
you mean connect to a proxy through another proxy? sure you can...
even then the traffic still goes through the outbound proxy with the web filter on it

so you're saying the web filter that you're trying to avoid is capable of looking into proxies, but not ssh tunnels?

SSH Tunnels are encrypted, While the proxy can probably see the tunnel, it cant tell what is in it.

Have you tried DNS Tunneling? http://www.daemon.be/maarten/dnstunnel.html It might suffice better then what you are trying to do.
possibally

quote:
Originally posted by TheSteve
Could OpenVPN be a possible option?

It appears to support NTLM HTTP proxies.

ok i know open vpn would work,

but i have ssh running already and it works and it goes through the http tunnel fine and it is a great solution,

i'm just trying to find a way to launch custom sessions, so if i could write putty session files i would use that,

the problem is that the command line interface which i have in a batch file (so i can change it) does not allow me to define the settings i am able to in the gui.
so i was wondering if there was a client that would allow me to do this,
alternatively i just need a way to create putty sessions without putty like in my other thread, but i can't seem to solve this line break problem.

also if i finish that python app, i will compile it and bundle it with putty and compile them in to one exe, using py2exe then using qbc(quick batch compiler)
RE: ssh, putty not flexiable enough by ShawnZ on 12-06-2008 at 02:35 PM

quote:
Originally posted by Jarrod

but i have ssh running already and it works and it goes through the http tunnel fine and it is a great solution,

no, it's a shit solution! look at how many fucking hoops you have to jump through to get it to work the way you want!

the proper solution is the easiest solution that does what you want.

i didn't think the computer was yours -- if it is, openvpn would possibly be the best way to do it.
RE: ssh, putty not flexiable enough by Jarrod on 12-06-2008 at 10:25 PM

quote:
Originally posted by ShawnZ
i didn't think the computer was yours -- if it is, openvpn would possibly be the best way to do it.
it's not, does it matter that much?

well at the moment all i need to do it load a session and it works, but if my mate wants to use it he needs to change the session around slightly, we just wanted to automate the modification of the session
RE: RE: ssh, putty not flexiable enough by TheSteve on 12-07-2008 at 12:47 AM

quote:
Originally posted by Jarrod
if i could write putty session files i would use that.
You can change putty sessions by modifying the registry.

The putty sessions are stored in:
HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions

Tunnels are stored in a string value called PortForwardings. 
Each tunnel specification is separated by a comma.

Example (Forwards VNC,SMTP and POP3 in to the network of the SSH server.):
L5900=192.168.0.4:5900,L25=192.168.0.5:25,L110=192.168.0.10:110,
RE: ssh, putty not flexiable enough by ShawnZ on 12-07-2008 at 12:47 AM

quote:
Originally posted by Jarrod
it's not, does it matter that much?

well at the moment all i need to do it load a session and it works, but if my mate wants to use it he needs to change the session around slightly, we just wanted to automate the modification of the session

seriously, just use openvpn. it would have taken less time to just set up openvpn than it did to reply to that post about not using putty.
RE: ssh, putty not flexiable enough by Jarrod on 12-07-2008 at 04:31 AM

quote:
Originally posted by ShawnZ
seriously, just use openvpn. it would have taken less time to just set up openvpn than it did to reply to that post about not using putty.
i was asking for alternative clients not alternative protocols, i can do it with putty if i solve this problem
http://shoutbox.menthix.net/showthread.php?tid=87541

RE: ssh, putty not flexiable enough by ShawnZ on 12-07-2008 at 04:42 AM

quote:
Originally posted by Jarrod
i was asking for alternative clients not alternative protocols, i can do it with putty if i solve this problem
http://shoutbox.menthix.net/showthread.php?tid=87541

right, but if you do it with openvpn, there wouldn't be a problem to solve. also, it was designed to do exactly what you want, whereas ssh wasn't.

seems like the right solution to me
RE: ssh, putty not flexiable enough by Jarrod on 12-07-2008 at 05:18 AM

quote:
Originally posted by ShawnZ
quote:
Originally posted by Jarrod
i was asking for alternative clients not alternative protocols, i can do it with putty if i solve this problem
http://shoutbox.menthix.net/showthread.php?tid=87541

right, but if you do it with openvpn, there wouldn't be a problem to solve. also, it was designed to do exactly what you want, whereas ssh wasn't.

seems like the right solution to me
so how does open vpn allow my to avoid the web filter?


RE: ssh, putty not flexiable enough by TheSteve on 12-08-2008 at 12:15 AM

I don't know what "\l" is supposed to be(may be my lack of python knowledge), but the file that you attached to the other thread has just "\n"(0x0D) at the end of each line (unix style).  Normal windows style is "\r\n" (0x0A 0x0D).


RE: ssh, putty not flexiable enough by Jarrod on 12-08-2008 at 06:48 AM

quote:
Originally posted by TheSteve
I don't know what "\l" is supposed to be(may be my lack of python knowledge), but the file that you attached to the other thread has just "\n"(0x0D) at the end of each line (unix style).  Normal windows style is "\r\n" (0x0A 0x0D).
in python \n is a new line, since i'm using windows it uses windows breaks, in theory if i ran it on linux it would use linux breaks