SSH Tunneling

From Silenceisdefeat
Jump to: navigation, search
This tutorial will show you how to proxy your traffic through SD using SSH Dynamic Port
Forwarding, to tunnel through firewalls and encrypt your traffic. Any web page you go to with this
method will be sent over the encrypted connection.

Contents
[hide]

1 Sign up!
2 Instructions for PuTTY
3 Instructions for OpenSSH
4 Instructions for Android phone
5 Setup

Sign up!
1. Before you start - get an account on SD!
Instructions for PuTTY
1. First, enter username@ssh.silenceisdefeat.com in the Host Name text area. You must have ssh.
before the silenceisdefeat.com or this will not work. You may connect to the
ssh.silenceisdefeat.com host with the following port of your choice: 22, 80, 143, 443, 465 and
587.

1. Then, in the category area to the left, select "Tunnels" under "Connection" then "SSH."
2. Type a port number (we will use 6500 in this tutorial) into the text area labeled "Source Port,"
select the "Dynamic" button then click "Add."
1. Now return to the "Session" menu and save this configuration to use later.
2. Open the connection and log into SD.

1. Open [Firefox] (or any internet browser, but Firefox is what is discussed here).
2. Go to Tools -> Options then click on "Connection Settings..."
1. Click "Manual Proxy Configuration," Uncheck the "Use this server for all protocols" button,
and enter localhost in SOCKS v5 host and your port number in the port section. Make sure all
other proxy configurations are empty.
 1. Go to [whatismyip.com] -- note that this website sends back a plaintext response consisting of
only your public IP address. If SD's IP (66.111.62.174 as of now) is shown, you are successfully
tunneling!
If you wish to further secure your connection in Firefox (or if website domain names are not resolving
using Firefox), do the following:
1. In Firefox's location bar, type: about:config
2. Right+Click and select: New, then String
3. You will be asked to enter a preference name. Enter the following:
network.proxy.socks_remote_dns
4. You will be asked to enter a value for the string. Type: true
5. Restart Firefox and try accessing a website again.

Instructions for OpenSSH

1. Type "ssh username@ssh.silenceisdefeat.com -D <port>"
2. Log in!
3. Open [Firefox] (or any internet browser, but Firefox is what is discussed here).
4. On Windows, go to Tools -> Options then click on "Connection Settings..." On Mac, click on
the Firefox menu, click preferences, then "Connection Settings..."
5. Click "Manual Proxy Configuration," Uncheck the "Use this server for all protocols" button,
and enter localhost in SOCKS host and your port number in the port section. Make sure all other
 proxy configurations are empty.
6. Go to [whatismyip.com] -- note that this website sends back a plaintext response consisting of
only your public IP address. If SD's IP (66.111.62.174 as of now) is shown, you are successfully
tunneling!

Instructions for Android phone

Requirements:
-You will need a rooted android phone.

-The OS version must be 2.1 (Eclair) or later

-You will need access to the Google play store.

Optional:
-A private key file (this will let you login automatically)

Setup
You will need to install both ProxyDroid and ConnectBot
Once they are both installed, launch connectbot, and enter your login:
yourname@http://silenceisdefeat.com
If it asks you to save the fingerprint, type yes.
After that, enter your password, and you should be logged in, press the menu key and select "port
forwards" press the menu key and select "add" click the drown down box next to 'type' And chose
"dynamic" and under source port type: 8080 To save the settings click 'Create port forward'.
At this point press the back key to return to your ssh session, And press the menu key, followed by
'disconnect'
Now you should see 'yourname@http://silenceisdefeat.com' listed, tap it to reconnect. After you enter
your password, you will be reconnected. We are now connected to the ssh session, and have the proxy
running. however your apps don't know to use this new setup, so that's were proxyDroid comes in!
Press the home key to return to the main menu(ConnectBot will be running in the background) Now
launch Proxy Droid.
Tap 'Host' and type in the box: Localhost And tap port, and type: 8080 Tap proxy chose 'Socks5'
Now Check the box labeled "Proxy Switch" You will be promoted to grant root access, do it! Now your
Proxy should be running!

Auto Login (optional)

If you would like to be able to use this method without having to type your
password,

you can use your private key!

-Getting your private key.
To generate a private key:

Use SSH to connect to silenceisdefeat.com. And in the terminal type: ssh-keygen -t dsa When it asks
for passphrase just press enter, Then it will ask you to confirm, press enter again
You can then download it with SCP: (scp 'path to folder'
yourname@http://silenceisdefeat.com:~/.ssh/id_dsa) or FTP Replace 'path to folder' with what folder
you want to save it in. Next copy 'id_dsa' to your Android's Sd card.
-Using your private key. Open connectbot from the main menu (press back if you are in a session)
press menu, and "manage pubkeys", press menu again, and tap 'import' scroll till you see the file, then
tap it. Press back, to be returned to the main menu, now long press on your connection
(yourname@http://silenceisdefeat.com) and tap 'Edit host' from tap 'use pubkey authentication, And tap
your key, and your done! From now on, when you connect to silenceisdefeat you will NOT Have to
type your password!

Testing:
To test open your favorite mobile browser, and go to: whatsmyipaddress.com look under 'ISP' if it says
"Sago" or something else (that's not your ISP) then it's working!
Note: not all will accept this Change, and may bypass the proxy!
Troubleshooting:
Problem: SSH session disconnected, and I can't reconnect! Fix:Go back to ProxyDroid and uncheck the
box "Proxy Switch"
Problem:Private key was working, but now it's asking for my password! Fix open ConnectBot, press
menu key, "manage pubkeys" then tap on your key the lock should turn green.
-End of android section (pictures coming soon!) --Bobdotexe 16:40, 1 May 2012 (UTC)
[[Category:SSH][Category:Android][Category:VPN][Category:Proxy]]
Retrieved from "http://silenceisdefeat.com/wiki/index.php/SSH_Tunneling"
Category: Support
This page was last modified on 1 May 2012, at 16:48.