Tag Info

Hot answers tagged

10

It's not the ssh client that decides through which interface TCP packets should go, it's the kernel. In short, SSH asks the kernel to open a connection to a certain IP address, and the kernel decides which interface is to be used by consulting the routing tables. (The following assumes you're on GNU/Linux; the general concept is the same for all Unices, ...


8

Just found a new solution for this recently that is REALLY neat. Take a look at sshuttle. https://github.com/apenwarr/sshuttle/


8

No packets are received for several seconds and then ~6 are sent back in quick succession. This is symptomatic of two similar phenomena: network congestion or network discards (usually due to congestion). In the first case, a router between here and there has a burst of traffic unrelated to your activities which cause your traffic to be buffered in ...


6

Yes, there is a Linux (and Windows/Mac) based SSTP (and lot more) VPN Server. It is called SoftEther VPN (http://www.softether.org). I used it on Ubuntu 13.04 release. Best of off, it is free. Granted, there are couple of limitations with the free version (for example, cannot use external authentication, client certificates etc.) In general, it seems to ...


6

f your server is running a recent sshd version ( >= 4.3 ) you should be able to use the ssh IP tunneling option "-w" and set up a point-to-point connection. After that it is just a matter of routing. (As your server is only reachable through the network beware to not cut the link when setting the routes. For instance open a new ssh connection to your server ...


5

/etc/resolv.conf defines how the computer resolves host names (e.g. which, if any, default domain names are searched when you try to resolve a non-FQDN hostname....lookup for a bare www becomes www.yourdomain.example.com), and which name servers are used to do the lookup. One of the reasons, and the most likely, that VPN clients might modify ...


4

I have no experience of PPTP Client and haven't looked at the instructions. But the command route add -net 0.0.0.0/0 ppp0 means “route all traffic through ppp0 except the traffic that has more precise routes”. This means that the loopback interface, your local network if you have one, and the route to the VPN server (which is set up, right?) will use the ...


4

Fedora also packages Openswan, which has a free IPsec implementation that you can use for a VPN.


4

Hamachi isn't meant for that. It's a VPN service/software, not an anonymous browsing helper. You could use Hamachi to tunnel traffic to another machine that runs something like Tor, possibly with an http proxy too or whatever else anonymizing techniques you will. Hamachi itself doesn't provide that. It lets you build a private network, but you have to deal ...


4

Two of the possibilities are: the host you're trying to ssh into only allows connections from certain IP addresses (e.g. addresses on one or more of the university's VLANs). They may not have configured it to recognise VPN addresses as "local". the host is configured to allow password-based auth from certain addresses but requires an ssh key from all ...


4

You need to do three things on your VPN server (the Linode) to make this work: You must enable IP forwarding: sysctl -w net.ipv4.ip_forward=1 Set up destination NAT (DNAT) to forward the port. You've probably already figured this out because it's standard port forwarding stuff, but for completeness: iptables -t nat -A PREROUTING -d x.x.x.x -p tcp ...


4

The EPEL repository has a vpnc package. Generally, EPEL should be the first place you should look for additional packages. The EPEL repository is semi-official, since it is from the Fedora project. Unlike rpmforge, it doesn't contain any packages that already exist in CentOS/RHEL, so you do not need to worry about conflicts. Instructions on setting up the ...


4

Assuming the VPS runs Linux as well, I'd setup some SSH tunnels from A to B with B acting as a gateway. That way, you could tell B to listen on port 8080 which then corresponds to the IP of IP camera one So from the A box, run ssh with these parameters ssh -nNT -R 8080:ipcam1:<ipcamport> -R 8081:ipcam2:<ipcamport> <VPS IP> Hopefully your ...


4

You could install a http proxy (like squid) on the client that is accessing this server, and then tunnel traffic back through the ssh connection to the client and then through the proxy. Something like this +----------+ +-----------+ | |+----SSH+-->| | | Client | | Server ...


3

Your kernel is too recent for the Cisco VPN client. You'll need to downgrade your kernel to a 2.6.30 version or below. See the release notes.


3

Don't use CIPE. It was deprecated a long time ago, as it isn't actually cryptographically secure. IPSEC is current, but it's a giant pain to get running. Use OpenVPN, especially if it's computer-to-computer (if some of the clients are, say, phones, then use IPSEC/PPTP, as OpenVPN clients aren't easily available on such devices). Here's the HOWTO: ...


3

From the sound of it, your campus firewall doesn't allow any connection to be initiated from outside the campus to your machine. So in order to connect to your machine you'll have to initiate the connection from the inside. So you'll have to establish some connection between your dorm machine D and some external machine E outside the campus. Then, when you ...


3

How do I ensure that my torrent client actually uses this connection? There is a site, CheckMyTorrentIP, that does exactly that. Basically, you download a torrent file generated specifically for you and once you open it in your client it will report the IP address being used. The IP should be displayed directly in your client but you can also revisit the ...


3

Do you have ssh as root disabled check your sshd configuration (possilby /etc/ssh/sshd_config) and look for the line PermitRootLogin no. Change the no to yes and restart sshd (most likely either service ssh restart or service sshd restart).


3

You can achieve this with the program nmap. If you specify an address in CIDR notation, it will scan all IPs in that block. nmap -sP 192.168.1.0/24 The flag -sP will bypass port scanning and just indicate whether the host is up based on ping.


3

If you're using NetworkManager you can use the command line tool that's part of it, nmcli to get this list: $ nmcli dev list iface wlan0 | grep IP4 IP4-SETTINGS.ADDRESS: 192.168.1.110 IP4-SETTINGS.PREFIX: 24 (255.255.255.0) IP4-SETTINGS.GATEWAY: 192.168.1.1 IP4-DNS1.DNS: 192.168.1.8 IP4-DNS2.DNS: ...


3

In the OSX 1.9 pppd source code, I found this in Helpers/pppd/pppd.h: #ifdef __APPLE__ #define EXIT_TERMINAL_FAILED 20 #define EXIT_DEVICE_ERROR 21 #endif #ifdef MAXOCTETS #ifdef __APPLE__ #define EXIT_TRAFFIC_LIMIT 22 #else #define EXIT_TRAFFIC_LIMIT 20 #define EXIT_CNID_AUTH_FAILED 21 #endif #endif #ifdef __APPLE__ #define ...


3

SSH SOCKS5 Tunnelling using PuTTY: Firstly connect to your server via SSH using PuTTY. Right-click on the top bar and hit 'change settings'. Goto Connection/SSH/tunnels. Source port: 4567, select 'Dynamic' and hit 'Add' Open up your choice of browser, and configure the 'Manual Proxy settings' to listen on port 4567 on localhost (127.0.0.1). In Firefox ...


3

It not about interface priority. The routing table determines what path your traffic will take. See ip route show and ip route get ipaddress Most VPNs push a default route via themselves. In my OpenVPN setup I've configured it to only push routes to the internal IP space, however that is a server-side option. Your client may offer the option of ignoring ...


2

So where points that address you typed in a gateway field? I've never configured OpenVPN using NetworkManager but i suppose that is the place where you should provide the address of your router. And in your log file there is a line which says: Mar 7 15:42:43 ASDF nm-openvpn[23554]: Cannot load certificate file /home/g/Desktop/client1/client1.crt: ...


2

Probably, you need to add appropriate route table entries to reach local intranet server via 10.131.60.1, not via ppp0. Consult with your system administrator if you don't know exactly which addresses should be accessed via local gateway.


2

Yeah... CrunchBang Linux uses .debs, not .rpms. Try the linux-headers-2.6-686 package or some variant thereof (e.g. linux-headers-2.6-amd64 on a 64-bit installation). And you don't actually need the source code, you just need the externally-visible headers. And beware 10-year-old instructions.


2

http://serverfault.com/questions/128357/routing-application-traffic-through-specific-interface use iptables -m owner. This lets you setup OUTPUT chain rules based on UID, GID, PID, SID and command name.


2

I think you can just get it from github either through git $ git clone git://github.com/apenwarr/sshuttle.git or simply download a recent package and unpack it $ wget https://github.com/apenwarr/sshuttle/tarball/master $ tar xvzf <filename> And then simply enter the directory and run it. You can move it to /opt/ or anywhere else, where you need ...


2

There is no practical way to select different routes on an application-by-application or process-by-process basis. (Linux had one for a time: iptables --cmd-owner, but that disappeared in kernel 2.6.14). See Linux : restricting outgoing on an application basis. You can select different routes on a user-by-user basis with iptables --uid-owner, or select ...



Only top voted, non community-wiki answers of a minimum length are eligible