We have an SSH tunnel (ssh -ND user@example.com), that works fine for browsers if point them to as socks5 proxy, but other traffic is still not going through this tunnel.

How would i make absolutely all traffic go through SSH tunnel?

Any tools, settings i need for that?

The system i am using is Debian and MacOS so better if solution is more or less general for both platforms.

  • I think that you're searching for a VPN... ssh is (IMHO) not the right tool for this.
    – Uwe Plonus
    Dec 11, 2012 at 8:35
  • @UwePlonus VPN is not available in this case. Sure i am aware of OpenVPN and can set it up myself. But it is just not available. Dec 11, 2012 at 8:41

1 Answer 1


You can create VPN using ssh. Here is the relevant section from man ssh:

    ssh contains support for Virtual Private Network (VPN) tunnelling using the tun(4) 
    network pseudo-device, allowing two networks to be joined securely.  The sshd_config(5)
    configuration option PermitTunnel controls whether the server supports this,
    and at what level (layer 2 or 3 traffic).

    The following example would connect client network with remote network using a point-to-point connection from to,
    provided that the SSH server running on the gateway to the remote network,
    at, allows it.

    On the client:

           # ssh -f -w 0:1 true
           # ifconfig tun0 netmask
           # route add

    On the server:

           # ifconfig tun1 netmask
           # route add

At the end, you will have tunnel interface which you can use to forward your traffic.

  • This is really cool! I've been using SSH tunnels for quite a while and never knew about this.
    – Dan
    Jan 8, 2013 at 22:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.