The tag has no wiki summary.

learn more… | top users | synonyms

20
votes
5answers
12k views

What are the exact protocol level differences between SSL and TLS?

This is a technical deep dive after this overview question was asked. What are the protocol differences between SSL and TLS? Is there really enough of a difference to warrant a name change? (versus ...
18
votes
5answers
12k views

How to set up a VPN Incoming connection with Windows to tunnel Internet traffic?

I want to set up a VPN on a remote server to route all my Internet traffic for privacy reasons. I can set up an incoming connection and connect to it successfully. The problem is, I can just see the ...
12
votes
6answers
4k views

How would you send syslog *securely* over the public Internet?

So I've got a few servers which I'd like to log centrally but obviously I don't want to pass the data insecurely over the internet. I've tried syslog-ng but can't make it work in a secure way, a ...
8
votes
1answer
2k views

mosh tunnel via proxy

I'm a growing fan of mosh and am increasingly using it when I have unreliable wifi links. What I am trying to figure out is how to build a tunnel through a server which is in a DMZ (connected to ...
7
votes
1answer
3k views

Cannot Delete GRE Tunnel

I am configuring a GRE tunnel in Linux 2.6.26 and I've been facing a very strange problem for which I could not find any solution. I have created a GRE tunnel called gre0, but no matter what I do, I ...
7
votes
5answers
3k views

SSH Tunnel as a Windows Service

I want to set up an SSH tunnel to run as a Windows service, I need to be able to set it up using only the command line so this counts out any software that doesn't include a command line version. ...
7
votes
1answer
2k views

Hurricane Electric Tunnel with Pfsense?

How would I setup a HE net Tunnel to route through PFsense so I can have v6 addresses on my servers? I already have the tunnel setup on their end, but there is no instructions for PFsense.
6
votes
5answers
3k views

Tunnel over UDP or TCP

Is there a way to create something similar to an IPIP or GRE tunnel only over UDP or TCP? I have a GRE tunnel between two servers and I noticed that sometimes it starts to drop packets. At the same ...
5
votes
2answers
5k views

SSH tunnel over multi hops using putty

I have a situation where I want to connect to a Linux machine running VNC (lets call it VNCServer) which is behind two consecutive Linux machines i.e., to ssh into the VNCServer, I have to ssh into ...
5
votes
2answers
3k views

Reverse SSH Tunnel

I am trying to forward web traffic from a remote server to my local machine in order to test out some API integration (tropo, paypal, etc). Basically, I'm trying to setup something similar to what ...
5
votes
2answers
531 views

How to Configure Secure Connectivity between Multiple Subnets

I have the following setup 2 x linode vps 1 x lab (physical) running 4 vps My goal is to make it so all nodes act as if they are on the same LAN. This will allow me to alter IPTable rules, to allow ...
5
votes
4answers
894 views

Tunnel with least overhead

I'd like to tunnel a large amount of traffic from my local network to a server located in a datacenter, in a way that I don't have to make many changes to my local applications. The two methods that ...
5
votes
1answer
9k views

How do I setup a TCP over DNS tunnel on Windows?

I've seen a few guides out there, but I could not get any of them to work. I can point NS records to my domain, so it sounds like I should be able to do this. I tried setting up a DMZ for the server ...
5
votes
2answers
555 views

ScreenOS ip6in4 tunnel over transport mode ipsec?

I have setup a point to point transport ipsec session between a ScreenOS router (SSG-5) and a Cisco 3925. The ipsec transport itself works great, but as soon as I try to direct the protocol 41 ...
4
votes
3answers
1k views

Tunneling all TCP and UDP traffic through a Server?

On a Linux or Windows system, how would it be possible to tunnel all TCP/UDP packets through a thirdparty server? What would one use, does it work with SOCKS5, OpenVPN or SSH?
4
votes
5answers
2k views

SSH remote access vpn tunnel

I have two machines both running CentOS linux, one is public facing machine with a real ip address (foo). The other is at a client's site behind a very restrictive firewall and with no real ip and no ...
4
votes
3answers
2k views

Tunnel an ssh connection through an intermediate machine in a single command

Is there a way, in a single command, to establish a ssh connection from my computer A, through computer B, to computer C, such that I have access to the shell on computer C? A wrinkle (which seems to ...
4
votes
2answers
481 views

How to link multiple SSH tunnels together in Linux

I have the following situation: A -----|------ B -----|------ Work Work can SSH into B, and A can SSH into B, but apart from that everything is firewalled. What I would like to do is in effect ...
3
votes
2answers
2k views

reverse ssh tunnel listens on wrong interface

I'm working with a server that is behind a firewall. I have established an ssh tunnel to an intermediate server in the internet like this: remoteuser@behind_fw$ ssh -N -f -R 10002:localhost:22 ...
3
votes
3answers
3k views

How to assign a hostname to SSH tunnel

I'm using ssh root@my.server.ip -g -L 4321:localhost:28017 to establish a tunnel from my MacBook to my dedicated server at my hosting provider. It works well. Now I want to access several admin sites ...
3
votes
2answers
2k views

Keepalived over GRE tunnel for failover on VPS environment

I'm running an application on Linode. Their network does not support multicasting. Many tools used for failover (keepalived, spread/wackamole, hearbeat) require multicast to work (as far as I know). ...
3
votes
3answers
326 views

Best non-native IPv6 connectivity (in Europe)

What is the best (most stable, fastest, easy to setup) way to get IPv6 connectivity and addressspace in Europe? And, why? I'm running a small hosting outfit from a rented server in Germany and would ...
3
votes
4answers
100 views

Tunnel over HTTP Server [closed]

As you know, in many countries censorships are prevents us to reach some sites. In Turkey, there will be censorships on Facebook and Youtube. I thought It will be great to pass these censorships ...
3
votes
1answer
455 views

Renting a IPv4 address block [closed]

I am building a lab network with about 10 virtual routers and 20 host machines (also virtualized) as a part of a school project. The aim is to demonstrate a wide range of IPv6 routing, deployment and ...
3
votes
2answers
1k views

setup ssh server and http server both on port 80

I have a web daemon (listening on port 80 and 443) and a ssh daemon (listening on port 22) on the same machine. I have a client (generating HTTP,HTTPS,SSH traffic) seating behind a proxy server (port ...
3
votes
2answers
2k views

Differences between SSH's tunnels and OpenVPN

I discovered that recent OpenSSH has support for tun devices. When it comes to tunnels and VPNs, I always thought the main programme was OpenVPN. Are there any advantages to using SSH tunnels? What ...
3
votes
4answers
1k views

Kill an SSH tunnel after X minutes even if it's still being used?

I'm setting up some background SSH tunnel for some backup procedures. However I'm worried the ssh process just sitting around. At the end of my script I kill the PID, but what if something happens to ...
3
votes
3answers
147 views

SSH port forwarding through Windows machine

is it possible to connect to an SSH server only accessible from inside a network, using a Windows machine without SSH as a gateway?. Let me clarify my question with a sketch: Me (Linux machine)---> ...
3
votes
2answers
602 views

Exposing a WebServer behind a firewall without Port Forwarding

We are deploying web applications in java using tomcat on client machines across the country. Once they are installed, we want to allow a remote access to these web applications through a central ...
3
votes
4answers
3k views

P2P VPN: cross between Hamachi and OpenVPN

I recently started using OpenVPN. It is useful because you can securely connect many clients from different networks. However, when two clients communicate, they are not directly connected but they go ...
3
votes
2answers
202 views

IPv6 tunnel broker setup

I'm working on a solution to allow remote Linux nodes that are behind firewalls to be accessible for SSH and web server. Can anyone suggest an IPv6 tunnel scheme that would work with NAT firewalls? ...
3
votes
2answers
2k views

6to4 tunnel: cannot ping6 to ipv6.google.com?

Follow the Setup of 6to4 tunnel guide, I want to test ipv6 connectivity, but I cannot ping6 to ipv6.google.com. Details below: # traceroute 192.88.99.1 traceroute to 192.88.99.1 (192.88.99.1), 30 ...
3
votes
2answers
787 views

SSH remote port forwarding

I want to connect to my computer(local) behind NAT through public accessible server(public). On local: ssh -g -R 8000:localhost:22 user@public Then on public: ssh -p 8000 user@public But I am ...
3
votes
1answer
2k views

Using ssh and corkscrew/proxychains behing a HTTP proxy

The Ubuntu box I am looking at is behind a proxy which supports CONNECT to 80/443 ports. I have set up an outside ssh server on port 443 and can connect to it with corkscrew / ssh without any problems ...
3
votes
1answer
1k views

What is the purpose of netcat's “-w timeout” option when ssh tunneling?

I am in the exact same situation as the person who posted another question, I am trying to tunnel ssh connections through a gateway server instead of having to ssh into the gateway and manually ssh ...
3
votes
1answer
2k views

SSH VPN tunnel without having to enable root

ive been trying to setup a VPN SSH tunnel and ive had success executing ssh -Nv -w 0:0 root@192.168.2.2 -p 50 however what i am wondering is, can i do the tunneling without having root unlocked ...
3
votes
2answers
871 views

Automatically-reconnecting TCP tunnel

I have an unreliable network connection between two machines: sometimes active TCP connections get dropped for reasons beyond my control. I want to establish a reliable TCP connection between the two ...
3
votes
1answer
243 views

Accessing X with xauth and ssh -X to my VPS?

I have an application I wish to run on my VPS (a web browser actually, iceweasle or similar) and do not really want to install a full blown X server on there for practical reasons. I have read I only ...
3
votes
1answer
2k views

Cisco ASA and static IPv6 tunnel endpoint?

I recently installed a Cisco ASA 5505 firewall on the edge of our LAN. The setup is simple: Internet <--> ASA <--> LAN I would like provide the hosts in the LAN with IPv6 connectivity by ...
3
votes
4answers
334 views

What software should I use for IP tunneling

I have two ethernet networks which are connected by a router (think it is cisco). Trafic from the two networks must not be mixed. Except from one virtual server (Win2003 based on HyperV) on one LAN ...
3
votes
1answer
95 views

secure connections between vps servers

I have four VPS servers. Two of them are replicated glusterfs server and the other two are glusterfs clients. What I want to do is to encrypt all communications between glusterfs servers and between ...
3
votes
2answers
266 views

Routing problems IPv6 client/server where server has both native and tunnelled address

I have been trying to get IPv6 working on my tap OpenVPN network. The server already has IPv6, however it only has a /64 and the biggest range available is a /116 (which breaks autoconf). I am getting ...
2
votes
3answers
152 views

Securely connect to mainframe from cloud

I will preface this by saying that I am a solution architect, and I have a client who wishes to host an app in the cloud. The app needs to access information from SAP and other systems. What is the ...
2
votes
2answers
578 views

Ethernet over IP

I need to merge two L2 broadcast domain into single domain and I have to do this over unmanaged by me L3 IP network. All that I could find is vtun utility for linux. Which software&howto you can ...
2
votes
3answers
2k views

How to avoid stalled scp transfer when tunneling through a gateway over ssh?

I'm try to transfer a large (1GB+) file from one machine to another, but I have to tunnel through a gateway in between. I'm able to transfer small files just fine. However, with the big file, the ...
2
votes
8answers
4k views

Encrypted Host-to-Host Tunnel on Ubuntu/Debian?

I'd like to connect two remote sites via a secure point to point tunnel. I've been using OpenVPN, but it's a little flakey and really seems to be more for connecting lots of users rather than a point ...
2
votes
1answer
134 views

translate telnet trafic to SSH

I have a closed source windows tool I need to run, which has to connect to a remote machine. Problem is, the tool only has telnet functionality, while the remote host only accepts SSH2. Is there some ...
2
votes
2answers
561 views

Ubuntu: Compressed, but not encrypted, tunnel for TCP?

How can I set up a tunnel for TCP connections between two hosts so that I can test a few different compression algorithms? I'm aware of stunnel & SSH, but want to avoid the overhead of ...
2
votes
3answers
4k views

I have a site to site VPN tunnel set up between offices, when I connect from home to either I cannot see the other side

This is my first time posting here so please be gentle. The title describes my problem, I will outline the setup: I have a site to site bidirectional VPN tunnel set up in two offices 100 miles apart. ...
2
votes
2answers
2k views

strange output on ssh tunneling: output failed; connect failed: Connection timed out;

I use ssh user@xx.yy.zz.41 -p 1234 -D 9898 command for tunneling, and I set firefox socks5 ip to 127.0.0.1 and its port to 9898. It works successfully ,but in terminal I have error in output: ...