SSL VPN

[John Priddy]

Yes, it's definitely possible to tunnel traffic through an established
ssh connection.  Probably beyond the scope of what can be explained on
the mailing list (not to mention, i have never actually set this up
myself and would probably do a poor job of it compared to others on this
list).  I would just search for 'ssh vpn tun'.  There's bound to be
information out there by people that have done this at other non linux
friendly vpn shops.  I have also seen people doing this to get around
web filtering, monitoring, etc @work.

John


On Thu, 2008-06-19 at 07:55 -0400, Rick Bilonick wrote:
> On Thu, 2008-06-19 at 01:00 -0400, John Priddy wrote:
> > ssh doesnt really have anything to do with ssl vpn or vpn in general for
> > that matter.  im not sure i fully understand what your asking, but yes,
> > you can tunnel traffic through ssh to other ports.  see the -L option of
> > ssh.  of course the ssh port will have to be both open and forwarded
> > from the router/firewall to the big bad internet.  opening up this
> > pretty much defeats the purpose of a vpn/firewall architecture though.
> > 
> > On Thu, 2008-06-19 at 00:48 -0400, Rick Bilonick wrote:
> > > On Thu, 2008-06-19 at 00:14 -0400, John Priddy wrote:
> > > > Oh, forgot to mention -- if your vendor is on this list, try using
> > > > 'vpnc':
> > > > 
> > > > http://www.vpnc.org/member-list.html
> > > > 
> > > > http://www.vpnc.org/
> > > > 
> > > > 
> > > > There should be howtos on this all over the web.
> > > > 
> > > 
> > > > > 
> > > 
> > > 
> > > I'm just curious and maybe completely off base, but is there any way to
> > > use ssh to contact the server if I first ssh out from the server?
> > > 
> > > Rick B.
> > > 
> > 
> 
> I guess I did not explain well. First, I ssh from the server (which is
> behind a firewall) out to my home computer and leave this connection
> open. Then when I go home, is there any way that I can use this
> connection from home? That is, can I somehow tunnel back through from
> home to the server over this connection? I may be totally off base, but
> I thought I read somewhere that this could be done.
> 
> Rick B.
>