Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If I run:


and I set my webbrowser to use SOCKS5 proxy, is there a way for the remote SSH server to monitor my web traffic?

I've seen this post that allows traffic to be monitored on a per-user basis, but what can they do if there is only 1 SSH user, and that 1 SSH user is used by many people behind 1 public IP address/NATed network?

I know that if I don't set network.proxy.socks_remote_dns to true in Firefox then they can see my DNS traffic, because it's resolved in my side.

So the Q: What are the methods to monitor traffic on the remote SSH server if there is only 1 ssh user with many "real" users using it?

share|improve this question
up vote 1 down vote accepted

"They" can correlate the ssh session with both your real IP and the traffic coming out of the ssh server. This method of tunneling traffic over ssh is great for encrypting the contents of the traffic between the ssh client and the ssh server, but it won't help you avoid monitoring on the ssh server.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.