I am looking into implementing SSH tunneling as a cheap VPN solution for outside users to access Intranet-only facing web applications.
I currently am using Ubuntu Server 10.04.1 64 bit with OpenSSH installed.
I am using Putty on Windows boxes to create a tunnel on a local port to my ssh server.
start putty -D 9999 mysshserver.com -N
I then use tell Firefox to use a SOCKS proxy on localhost:9999.
The -N flag will disable the interactive shell from the client side. Is there a way to do this on the server side?
Besides disabling root access, using rsa key authentication, and changing the default port; are there any other obvious security practices I should follow for this purpose? My goal is to simply be able to tunnel web traffic.