Introduction

Those workplace proxies can be really annoying! But there are always solutions!

So here’s the situation: I want to access a remote machine via SSH, but only ports 80 and 443 are allowed. Even if you configure the SSH server on port 443, you’ll notice it doesn’t work.

A solution? Yes: connect-proxy.

Installation

Seveur

On the server, simply modify the sshd_config file to make SSH listen on port 443:

1

Port 443

And restart the SSH service.

PS: If you don’t want to run SSH on port 443, you can use SSLH method to multiplex SSL and SSH on the same port.

Client

Debian / Ubuntu

Install connect-proxy:

1

aptitude install connect-proxy

Mac

Let’s compile it:

1
2
3
4
5
6

cd /private/tmp
wget http://www.meadowy.org/~gotoh/ssh/connect.c
gcc connect.c -o connect -lresolv
sudo cp connect /usr/bin
sudo chmod 555 /usr/bin/connect
sudo chown root:wheel /usr/bin/connect

Others

You’ll need to compile it:

1
2
3
4
5

cd /tmp/
wget http://www.meadowy.org/~gotoh/ssh/connect.c
gcc connect.c -o connect
sudo cp connect /usr/local/bin/
sudo chmod +x /usr/local/bin/connect

Configuration

Create or edit your SSH config file (~/.ssh/config):

1
2
3
4
5
6

## Outside of the firewall, with HTTPS proxy
Host my_ssh_server_i_want_to_reach
ProxyCommand connect -H annoying_proxy:3128 %h 443
## Inside the firewall (do not use proxy)
Host *
  ProxyCommand connect %h %p

The configuration is complete, now you just need to connect:

1

ssh my_ssh_server

Resources

Edit this page

Last updated 30 Jul 2012, 11:19 CEST. history