Privacy:SSH

From Technologia Incognita
Revision as of 21:35, 17 August 2013 by Narya (talk | contribs) (placeholder for documentation ssh tunneling)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Introduction

Use your computer at home to browse and check e-mail

Setting up a SSH tunnel from anywhere (e.g. the hackerspace, a bar, the airport) to your home or another trusted place can help you to

  • send your internet traffic over a secure connection
  • access webpages that are blocked on the internet connection you are using

You use your trusted place (e.g. home) as a hub to access the rest of the internet. You need a ssh server to connect to. Let's assume we already have such a server (home.nl) with ssh running on port 1022. Here is an example to setup a tunnel from your laptop to your home via the commandline:

ssh -D 9001 me@home.nl:1022

It looks like you login to your server at home, but you have now created a, so-called, dynamic tunnel (the -D option) to home. 9001 indicates the local port on your laptop, me@myhome.nl:22 is the computer you use as a hub. In your browser you can now use your local 9001 port to tunnel your traffic via your home computer. In Firefox: Preferences > Network > Configure how Firefox connects to the internet Choose "Manual proxy configuration" and fill in SOCKS Host: "localhost" and Port: "9001". Leave the other settings blank.

You can check before and after you changed this how the internet sees you, e.g. by checking your ip-address with http://www.whatismyip.org/