Connecting Remotely through proxy

[dhicks]

Don't know how to get around the port issue the only ones open are standard ones like 80 and imap etc.

 

If you already have a port for HTTP open (generally port 80, but doesn't have to be), then could you install a proxy server on that port to redirect traffic according to server name? So http://www.domain.com gets directed to your web server, but remote.domain.com could go to a web-based admin console (command prompt?) of some sort. You'd need access to add entries to your domain name's DNS settings, of course.

[beany1]

@dhicks - I'd need to be able to port forward though then wouldn't I? I don't have access to the proxy, firewall, or even the switch that's connecting the school to the bt fibre connection. It's just all getting overly complex to say I just wanted to be able to catch up on some tasks at home!

 

Think ill wait for the response to the questions you asked dhicks from our provider, but for now I've given in!

 

Thanks for all the help everyone

[dhicks]

I'd need to be able to port forward though then wouldn't I?

 

No, this is a different solution (one that your LEA might consider more secure, too). You simply have a web-based application running inside your firewall that lets you log in and do admin tasks. This works just like any other web-based application, over HTTP. I'm sure there must be a Javascript-based shell somewhere, or does maybe VNC work over HTTP?

 

If the issue is simply that your LEA don't think that a free solution is going to be as secure as a paid one then all we have to do is charge a £500 setup fee to install an SSH server appliance and, say, £50 per user per year and wait for the money to role in :-)

[PiqueABoo]

Variation on the dhicks theme:

 

If it's just one server you want to RDP to, then tell them you've put a TSG on the relevant IP address to get 443 opened/mapped. Pop stunnel on the server using port 443, and *importantly* configure it for mutual auth i.e so you need a client cert to connect the tunnel from home. Tunnel RDP over it.

 

Or perhaps tell 'em you want to do that and ask them to justify why it is less secure than TSG (which it probably is NOT unless TSG folk are also using mutual auth).

[jonnykewell1]

Hi guys, tried using putty to connect to my ssh server at the weekend, locally i get a connection in no problem but if i put in the external ip address i get connection refused, I have changed the SSHD_config file to allow to 443, so from work i assume i enter the external ip address and port 443 not 22 to get the connection through to my router, any help would be much appreciated, [email protected] if anyone could contact me for help. Thanks.

[dhicks]

locally i get a connection in no problem but if i put in the external ip address i get connection refused, I have changed the SSHD_config file to allow to 443, so from work i assume i enter the external ip address and port 443 not 22 to get the connection through to my router

 

You'll need to set your firewall at work up to port-forward a port to port 22 of your SSH server. You don't actually have to use port 22 on the firewall itself - you could tell your firewall to forward say, port 1500 to port 22 of your SSH server, then from home you would connect to port 1500 of the external IP address at work and your SSH connection should get forwaded on to your SSH server.

[MatthewL]

Would it not be cheaper to order your own broadband line and connect that into your local setup and then you have redundancy if your internet link goes down?

[edutech4schools]

If its just for you to access the server why not use logmein. No ports need to be open

[edutech4schools]

https://secure.logmein.com/UK/

 

and if its just for you, you could use the free version. https://secure.logmein.com/UK/products/free/

[jonnykewell1]

Hi guys,

 

thanks for all replies, its not just so I can control the pc's its so we can use my connection from home through tunnelling as our service provider block everything at work.

 

i know 443 is open so i could route the ssh through that couldn't i and then link to port 22?

 

cheers.