Jump to content

Recommended Posts

Posted

Is it possible to access SSH/FTP through port tunnelling or proxy or something?

 

I'm not exactly sure what i'm asking for but the problem i'm facing is: i want to access my home NAS (linux) box from work. However my works proxy is pretty much locked down i can't ftp, ssh, ftps.. everything is pretty much blocked.

 

I can WebDAV into the box, as expected as this is port 80.. so is there any way i can access ssh/ftp over port 80? Obviously i can't listen on port 80 since it's already in use but i can change the ports to anything else not in use.

 

WebDAV would be suitable but since it treats all files like http requests it's hard to do web development from the box, if there is an error in the PHP file. then opening the file will just display the error, rather than the code. It's the same with .htaccess files and such, they are blocked from direct http access.

 

I'm not sure if either solution would be possible:

- Make WebDAV work like FTP... may be some apache configs or something?

- Port tunnelling or some sort of service to allow access to FTP/SSH over a proxy?

Posted

OpenVPN tunnel over 443 -> world = oyster?

NAS box may be able to run openvpn.

Having said that, your proxy may block those sorts of non-web connections.

 

Best way: ask whoever looks after your firewall systems to open 22 for you? Perhaps after auth?

Posted (edited)

As tom says, ask your local firewall admin and also check if your firewall lets VPN traffic though. Most corporate ones will for obvious reasons. If so, then just setup a VPN server at home and use that.

 

Alternatively have SSHd listen on an unblocked TCP port (such as 80, 8080, 23, 25, 53, etc) at home, you can then tunnel anything over the SSH connection as if you were sat on your home network.

 

If there are no open ports, then you will have to use and abuse your local HTTP proxy with corkscew.

 

http://www.agroman.net/corkscrew/

 

The connection will have high latency, but it will work.

 

As for your WebDAV question, typically the issue is resolved by having a directory alias pointing to your PHP files that has NoExec set.

Edited by Geoff
Posted

I have OpenVPN built into the NAS but it's restricted to certain ports as main ports are used for other services 80 http, 443 https etc... and then obviously i can't connect on the other ports because they are blocked.

 

So is my only option here corkscrew?

Posted
I have OpenVPN built into the NAS but it's restricted to certain ports as main ports are used for other services 80 http, 443 https etc... and then obviously i can't connect on the other ports because they are blocked.

 

So is my only option here corkscrew?

 

perhaps you could do port address translation on your home router and map 443 ->vpn on your NAS ?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...