Re: Tunnelling Squid Proxy

Tim,

> I have a remote (outside-the-U.S.) user for whom X-forwarding is

Yes, it is perfectly doable.

Make SSH forward any port on the user's local host to your proxy and the correct port. Make the browser proxy everything through "localhost" at the local port they specify. That's all.

Assuming that "mycache.example.com" has a Web proxy on port 8080, and machine.example.com (which may of course be the same as mycache, or a different machine inside your network) has SSH login facilities, you could do this:

outsidemachine $ ssh -L 8080:mycache.example.com:8080 machine.example.com

While the SSH link exists, the user can proxy through "localhost:8080".

(SSH2 also allows you to use the "-f" option, which sends the ssh  session into the background without the need for an interactive shell  to be open.)

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Using compression with SSH is a good idea since HTML files tend to compress very well.

I do this all the time from my home cable modem connection when I need to access services that are only available inside the University network.

-- 
Atro Tossavainen (Mr.)               / The Institute of Biotechnology at
Systems Analyst, Techno-Amish &     / the University of Helsinki, Finland,
+358-9-19158939  UNIX Dinosaur     / employs me, but my opinions are my own.
< URL : http : / / www . iki . fi / atro . tossavainen / >

File attachments NOT welcome unless agreed to beforehand.