Internal Errigal Collaboration Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== How to tunnel from outside the office  ======

Source:[[https://www.mikeash.com/ssh_socks.html|How to Tunnel in Firefox on Mac]]

===== Introduction =====
Many times it can be convenient to tunnel your web traffic through a proxy, particularly an encrypted one. This web page shows how to easily tunnel your traffic through an ssh-encrypted proxy on Mac OS X. This allows your traffic to traverse your local network without being visible to snoopers, even when visiting unencrypted sites.

==== What you need====

A stock copy of Mac OS X, plus one copy of Firefox. Oddly, the ssh client that ships with Mac OS X only supports the SOCKS4 protocol, but Safari only supports SOCKS5. Rather than play around with other ssh clients, we'll simply use a browser that speaks SOCKS4.

You also need a shell account on another computer. This shell account will need ssh access. This is almost a given at this point in time, but you never know if there are some people out there who are still using telnet exclusively.

=== Setup ===

First, open Terminal and run the following command:

    ssh -D 2001 user@host.com

The -D 2001 tells ssh to set up a SOCKS4 proxy on port 2001. Replace user@host.com with your actual username and remote host information, of course. Log in, and your SOCKS4 proxy is set up and ready to go. Note that you need to stay logged in to your shell for as long as you intend to use the proxy.

Next, open Firefox. In Firefox's address bar, enter about:config. You'll get a ton of configuration options. To narrow it down some, type "proxy" into the filter box at the top. You should get a list like this:
{{:support:ff_proxy_config.png|}}

Set all of the items in bold to exactly what you see in the screenshot. For those of you who can't see the screenshot, set the following:

{{:support:ffsettings.png?300|}}

These settings configure your SOCKS4 proxy, but don't actually switch it on. This means that you can leave them set permanently, and they won't affect your connection unless you want them to.

To make Firefox actually use the proxy, make one final change: set network.proxy.type to 1. Then go to [[http://www.whatismyip.com/|http://www.whatismyip.com/]] to test. If it worked, you should be seeing the IP address of your remote shell host. Compare with its value in Safari if you're unsure.

If you want to use Firefox without the SOCKS4 proxy, simply reset the last setting: set network.proxy.type to 0.

===== Example =====
Example how to do this
\\ //Comeragh 
\\ ssh scotty@212.17.60.121 -D2001

\\ //Hermes (Sacramento)
\\ ssh scotty@65.74.172.42 -D2001

===== Alternative Setup - Tunnel With MacOS =====
This is particularly useful for development if you need to interact with devices outside of a browser setting.

  - Under the apple menu, navigate to System Preferences -> Network.
  - Click "Advanced".
  - Click on the Proxies tab.
  - Click on SOCKS proxy.
  - Enter the ip address of the server you wish to tunnel through along with a port.
  - Make sure the SOCKS proxy checkbox is ticked.
  - Click OK.
  - Click Apply.

{{:support:screenshot_2021-08-06_at_14.58.08.png?400|}}
Sidebar

Internal Errigal Collaboration Wiki

User Tools

Site Tools

Page Tools
