Say I have a computer inside a typical home router (but say firewall/port forwarding access to the router is not available). It's internal IP can be 192.168.1.81. There is an attacker machine on that LAN with the IP 192.168.1.85 that wants to do a typical ARP spoofing MITM attack on 192.168.1.81 (say he wants to run something like urlsnarf to sniff for visited websites). The 192.168.1.81 machine wants to prevent any form of MITM attack and stay secure when browsing the internet on Chrome. He has a server with SSH access that he wants to use to encrypt his web browsing so the attacker cannot sniff it with a MITM attack. How can I (the user who wishes to use SSH tunneling to stay secure) use SSH tunneling on my server (at public IP 162.xx.xxx.xx) to prevent the potential MITM attack? This is for a science fair project. What (if any) settings would I have to make on my server (I have full root access)? My SSH port is different than the norm, so please make the SSH port 25512 as reference. I have also opened port 4567 on the firewall for the server, so please use that port for reference as well. Please use 72.xxx.xx.xxx as the public IP for the home network. Please include any commands necessary. Let me know if I need to be more clear. Thank you very much to anyone who can help!
closed as off-topic by EEAA, Falcon Momot, mdpc, Ward, Ladadadada Jan 9 at 15:16
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions must be relevant to professional system administration. Server Fault is dedicated to professional system and network administrators. End user and enthusiast questions are off-topic (contact your system administrator or hire a professional to help you out). Please see the Help Center for more information." – Falcon Momot, mdpc, Ward
The easiest way is to run a proxy (f.e. squid) on your remote server and make it listen only on the local interface
Then you ssh into the remote server and create a tcp forwarding to the local proxy interface on the remote server.
For example, lets say your proxy on the remote server
This opens a tunnel from your client's
These are the relevant parts of