A user, who has a company laptop (Windows Vista) and is located in a network that doesn't allow just any traffic to get out, needs to log into one of my SSH servers. It doesn't work. As far as I can gather, security is:
- General port restrictions at the router level; only allow 80, 443, etc.
- Local Software firewall restricting program access (Symantec software)
- HTTP is not proxied.
- He is not a local Administrator on his laptop.
I made an iptables rule that forwards port 80 to 22. When he accesses the host with Internet Explorer, he gets an SSH version string. Putty, however, can't connect. Nor can wget.
I suspect that the Symantec firewall is blocking it. When you open the status panel, you can't see what is allowed and what is not (but you can see the connection each program makes), but I suspect that when one were to access it with Administrator rights, you'd be able to see that, and grant programs access.
To sum up, I tried:
- ssh on port 80
- VPN to the host (is also blocked)
- Naming putty.exe IExplore.exe
- Adding routes to routing table (can't, you need admin rights)
The only solution I see at the moment is installing a web-based ssh client on the server in question...