Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to create a VPN tunnel from a client computer if the only thing you have is the possibility to initiate a SSH connection to a machine that has access to the "intranet"?

I know how to do this for specific ports but I am looking for a solution that would work for all ports.

FYI, the server is running Debian and the client OS X 10.8

share|improve this question
Who's security are you trying to bypass? – John Gardeniers Aug 16 '12 at 9:35

SSH can have many ports forwarded, you aren't limited to one per session.

But if you really can't predict what ports you are going to want use. openvpn tunnelled through ssh.

share|improve this answer
The openvpn solution pre-supposes that openvpn is available on the remote system or can be installed (in which case, why bother with the ssh layer?). If openvpn is not an option then check if ppd is available - see also – symcbean Aug 16 '12 at 10:56
He bothers with the ssh layer, because from his description of the problem it appears the only traffic he can route to the server is ssh. Debian includes openvpn 2.1.3-2+squeeze1 in the stable build. On Macos he can use one of the package managers to install openvpn or follow this even more step by step howto.… – Michael Henry Aug 16 '12 at 11:09

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.