up vote 1 down vote favorite
share [g+] share [fb]

I have the following environment:

  • In company X I develop a application on a pc A in network A with ip address 192.168.100.50 which has to do an https request to an http server located in the intranet of company Y
  • In company X is another pc B in network B with ip address 192.168.200.100
  • pc B (of company X) can access the intranet from company Y via ssh tunnel (putty)
  • pc A (of company X) can ping pc B (of company X) note: pc A can also do a remote desktop connection to pc B)
  • pc B can ping the http sever

  • pc A can not ping the http server

    1. How can the https request from pc A of company X get to the http server of company Y?
    2. On which pc must be putty configured?
    3. And which settings for host, port forwarding etc. has to be done in putty?

So finally the https request should go from PC A -> PC B -> Http Server in company Y.

Edit

The scenario I described above this "Edit" is related to subnet Y-SN1 of company Y which can be reached only via putty and ssh. This now works with the answer @faker gave (but in addition to his answer I had to add the port to the allowed ports on the windows firewall on PC-B).

What does still not work: In a browser on PC-B I can enter and reach a https site of company Y´s subnet Y-SN2 without using Putty. How can this https site reached from PC-A? I tried to install Jana (a free proxy server tool) on PC-B, but this only worked for http sites not for https. Anyway I am not sure if this would be the right way to solve this, I would prefer a solution without using any extra tool installation, because I have restricted admin rights on both PCs A and B.

link|improve this question
You already have a computer which can get to the intranet using putty, and your question is how can you get a computer to the intranet using putty and which computer must putty be used on? Your question is a mess of unclear stuff ... and your title doesn't seem to reflect what you want. Is it a homework problem, by any chance? (Why is PC B in Company A, then on the next line it's in Company X?) – TessellatingHeckler Nov 13 '11 at 14:43
Sorry for all the unclear information! There was an error in my inital question as you noticed, I edited the question and fixed point #2 -> PC B is located in company X as well as PC A, but both PCs are in different Class C networks as you can see from the IP adresses I posted. What I want to do is to forward the https request from PC A of company X -> PC B of company X -> http server of company Y. Putty is already running on PC B and gets access to company Y. Maybe there must be done more settings on PC B´s putty? What do you mean by asking wether it is a homework problem? – donttellya Nov 13 '11 at 17:34
...so hopefully my edits made my question more clear!? – donttellya Nov 13 '11 at 17:40
You ask which PC to use PuTTY on, but you use it, so you must know how it works. That makes it feel like a homework question posted by someone who hasn't used it. Put PuTTY on PC A and copy the settings from PC B. Now PC A can access the intranet in the same way PC B does. (Your update makes it clear you want the request going through PC B, but why would you want to do that?) – TessellatingHeckler Nov 13 '11 at 23:28
Because PC-A can not set up the tunnel to the ssh host in company Y. In Putty on PC-A I would have to specify that host. But the host to which the tunnel is set up is located on company Y and I can´t reach the ssh host from PC-A, so I can only set up the tunnel from PC-B to company Y. I still need your helpt because the solution of @faker did not solve my problem – donttellya Nov 14 '11 at 8:38
feedback

1 Answer

up vote 0 down vote

I hope I understood everything correctly:

  1. PC-A needs to use PC-B as a proxy server.

  2. PC-B - but you said this is working already?

  3. In putty on PC-B you need to configure a tunnel with any source port (usually 8080 is used) and destination of intranet-server:443.
    Make sure that you checked the box "local ports accept connections from other hosts".
    On PC-A you need to use PC-B:8080 as a (SOCKS) proxy.

Be aware that this will open up the possibility of connecting to the intranet-servers HTTPS service to all machines which can connect to PC-B!
That might not be desirable. Usually there is a reason why one subnet can and another can't connect to another companies server.

link|improve this answer
yes PC-B can already access the other company´s network via ssh. I think I have understood your answer and I will give it a try tomorrow. I will give a feedback after that. Thank you for your quick response! – donttellya Nov 13 '11 at 22:37
Your answer works partly for me now. I have made an Edit to my answer to describe more detailed what I want to achieve. – donttellya Nov 14 '11 at 23:56
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.