How to browse securely with SSH and a SOCKS proxy

[torvpn]

@Jarige2 : Accept my sincere facepalms.

[Jarige2]

I agree with lewiszim that displaying your (friends) IP is not a smart thing to do. It makes it easier for hackers to come in. If you've got a router that sets up a NAT, you'd better forward some random port above 10000 (lets say 12345) to port 22 on the mac mini. You can then use ssh name@ip -p 12345 to log in.

The reason why it's safer is because port 22 (SSH default) gets scanned by automated tools by hackers.

In this case, port 22 was filtered (sorry, I tried :P).

[iLoveeApple]

Guys How Can I Setup An SSH Tounel Like The One That Is Used On The Video In Order To Connect From My Laptop On A Hotel To My iMac At Home????

[slaveriq]

try with:

ssh -CD 8080 -Nf user@host >& /dev/null

this will start the ssh tunnel in background and won't spam your shell with errors like

"time out on channel"

and this one:

networksetup -setsocksfirewallproxy device 127.0.0.1 8080 off

will do the "use this socks proxy" for you just replace device with "AirPort" or "Ethernet" or what ever device you are using.

this:

networksetup -setsocksfirewallproxystate device off

will turn of the "Use proxy" flag. Still need to kill the tunnel though ;)

[graingert]

@richardkmiller Try ssh -CND 9999 user@host for compression

[graingert]

ssh -ND 9999 user@host

will not result in a shell being opened but will still have a localhost:9999 proxy tunnel

[richardkmiller]

@graingert hey thanks, I didn't know that.

[lewiszim]

You realize that anyone can trace your general location very easily when you give your ip address away right?

[richardkmiller]

Yeah I didn't mind revealing my IP in this case.

[graingert]

@lewiszim richardkmiller, didn't give his IP away only that of the remote MAC mini server.