Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Do you know any open source solution for proxying ssh connections transparently(MITM). My aim is to - while allowing forward shh connections, block ssh reverse tunnels - block http proxy over ssh (to force ssh just for commands not as a pipe to internet) - whitelist or blacklist some some commands thru this proxy.

Do you know any solution that converges my aims?

share|improve this question

closed as not constructive by pauska, MadHatter, Bryan, Dave M, Tom O'Connor Apr 1 '13 at 21:41

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

Users can misuse their right to make ssh command connections for tunneling. This is constructive while my question is not! – seaquest Apr 2 '13 at 5:03

Its not open source, but Palo Alto devices will do some of what youre describing. See references below , though whatever you use will either require clients to use a key from the man in the middle device to decrypt the traffic or youll end up with clients having errors about encryption.

For Example, Further details here, and Here

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.