Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

If I run:

ssh -fND localhost:6000 USERNAME@IPADDRESS -p PORTNUMBER

and I set my webbrowser to use 127.0.0.1:6000 SOCKS5 proxy, is there a way for the remote SSH server to monitor my web traffic?

I've seen this post that allows traffic to be monitored on a per-user basis, but what can they do if there is only 1 SSH user, and that 1 SSH user is used by many people behind 1 public IP address/NATed network?

I know that if I don't set network.proxy.socks_remote_dns to true in Firefox then they can see my DNS traffic, because it's resolved in my side.

So the Q: What are the methods to monitor traffic on the remote SSH server if there is only 1 ssh user with many "real" users using it?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

"They" can correlate the ssh session with both your real IP and the traffic coming out of the ssh server. This method of tunneling traffic over ssh is great for encrypting the contents of the traffic between the ssh client and the ssh server, but it won't help you avoid monitoring on the ssh server.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.