Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to connect myself (Mac OSX) through SSH on a distant server (Unix also) which has no internet access. I would like to browse the internet on the server (updates and other stuffes), so I've made a reverse HTTP tunnel.

I've installed SquidMan on my Mac OSX laptop, as proxy server.

This is my config:

HTTP port: 8080
visible host name: localhost

This is the way I connect myself through SSH in the reverse tunnel:

ssh -R 8080:localhost:8080 root@example.tld -p 6666 -X -v

On the server, because I've started X, I can open the distant Firefox browser, and this is my proxy config:

As HTTP proxy:
http://localhost
port: 8080

That configuration will not work. Firefox is offline.

This is the remote server ifconfig output:

eth0      Link encap:Ethernet  HWaddr 00:50:56:96:b4:38  
          inet addr:192.168.151.2  Bcast:192.168.151.255  Mask:255.255.255.0
          inet6 addr: fe80::250:56ff:fe96:b438/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1960315 errors:0 dropped:18 overruns:0 frame:0
          TX packets:1905535 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:684652815 (684.6 MB)  TX bytes:540798409 (540.7 MB)
          Interrupt:19 Base address:0x2024 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:939205 errors:0 dropped:0 overruns:0 frame:0
          TX packets:939205 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:459051202 (459.0 MB)  TX bytes:459051202 (459.0 MB)

and this is my Mac OS X ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
    options=3<RXCSUM,TXCSUM>
    inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 
    inet 127.0.0.1 netmask 0xff000000 
    inet6 ::1 prefixlen 128 
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    options=2b<RXCSUM,TXCSUM,VLAN_HWTAGGING,TSO4>
    ether a8:20:66:0f:7b:45 
    media: autoselect (none)
    status: inactive
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    ether 20:c9:d0:c0:68:e7 
    inet6 fe80::22c9:d0ff:fec0:68e7%en1 prefixlen 64 scopeid 0x5 
    inet 192.168.1.104 netmask 0xffffff00 broadcast 192.168.1.255
    media: autoselect
    status: active
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
    ether 02:c9:d0:c0:68:e7 
    media: autoselect
    status: inactive
fw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 4078
    lladdr 00:3e:e1:ff:fe:8d:c9:10 
    media: autoselect <full-duplex>
    status: inactive
utun0: flags=80d1<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1406
    inet 172.16.5.3 --> 172.16.5.3 netmask 0xfffff000

I am open to any tools other than what I've ever used, and another important point to tell, is that I am root on both access.

share|improve this question
    
Why does it have no Internet access? This is usually only done for a pretty specific reasons related to security. If your policies prohibit you from doing, this, then you really shouldn't be doing this. –  Zoredache Oct 11 '12 at 22:45
    
It's for a security laboratory in school. I need to install stuffs on the server. I am the vmware owner of the server. –  Pier-alexandre Bouchard Oct 11 '12 at 23:34
    
You're definitely going about it the hard way, then. My approach in a situation like this would be to install software while online, and then take the server offline. Alternately, use portable storage (e.g. a USB flash drive). –  pjmorse Oct 15 '12 at 17:05
    
It's a vmware network. I don't have any physical access to the server for usb keys, etc –  Pier-alexandre Bouchard Oct 15 '12 at 17:14
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.