- Accessing ssh over port 80
- Posted by iksrazal on February 26th, 2004
Our companies firewall only allows traffic over port 80. I asked if I
could access my home linux machine's scp service over port 80 and they
said yes. I need to backup lots of data. We have no cd burner here or
such.
My questions are:
1) Is that possible or make sense?
2) Would port forwarding be the way to do that? Any links that may
help me?
3) Any other ideas?
iksrazal
- Posted by Davide Bianchi on February 26th, 2004
iksrazal <iksrazal@terra.com.br> wrote:
Without a proxy?
Possible yes, make sense a little less, you can run sshd on any
port you want.
Buy a removable hard disk? Take the hard disk of the machine away
and install it in your home system? Bring a laptop in the office
and connect them using a cross cable? Really, there are better
way to backup data than copy them trought the internet...
Davide
--
| Bees are very busy souls They have no time for birth controls And that
| is why in times like these There are so many Sons of Bees.
|
|
- Posted by Andreas Janssen on February 26th, 2004
Hello
iksrazal (<iksrazal@terra.com.br>) wrote:
Does that mean they only allow connections to port 80, or from port 80?
I assume they allow connections to port 80, making it possible to
connect to web servers. In that case tell the ssh server on your home
machine to run on port 80 (if there is no other servic on that port).
See "man sshd_config" and /etc/sshd_config for details. When you
connect to the server, tell your client which port to use, e.g.:
ssh -p 80 user@host
best regards
Andreas Janssen
--
Andreas Janssen <andreas.janssen@bigfoot.com>
PGP-Key-ID: 0xDC801674
Registered Linux User #267976
http://www.andreas-janssen.de/debian-tipps.html
- Posted by peter pilsl on February 26th, 2004
iksrazal wrote:
I can hardly imagine that your company only allows outgoing connectins to
port 80. Normally this is one of the ports that are not allowed, cause
connections to webpages are usually done via a internal proxy.
It would make more sense if they mean only incoming connections to port 80
are allowed cause your company runs a webserver in the DMZ.
So : if its true that only outgoing connections to port80 are allowed you
can easily run your sshd to listen on port 80 by applying the "-p 80"
option when starting or alter your configfile. Its recommended to have it
listening on port 80 *and* port 22.
best,
peter
--
peter pilsl
pilsl_usenet@goldfisch.at
http://www.goldfisch.at
- Posted by Grant Edwards on February 26th, 2004
On 2004-02-26, iksrazal <iksrazal@terra.com.br> wrote:
Sure.
No. Just run and sshd listening on port 80.
$ man sshd
I believe it's "-p 80" that you're interested in.
--
Grant Edwards grante Yow! ... the HIGHWAY
at is made out of LIME
visi.com JELLO and my HONDA is a
barbequeuedOYSTER! Yum!
- Posted by Grant Edwards on February 26th, 2004
On 2004-02-26, peter pilsl <pilsl_usenet@goldfisch.at> wrote:
The place I used to work set up their firewall that way. They
only allowed outbound TCP connections to ports 80 and 21 (http
and ftp). The theory was it prevented people from using chat
clients and P-P clients. Of course it didn't, it just made
them waste more time getting around the firewall.
--
Grant Edwards grante Yow! An INK-LING? Sure --
at TAKE one!! Did you BUY any
visi.com COMMUNIST UNIFORMS??
- Posted by fernando on February 26th, 2004
On 2004-02-26, iksrazal <iksrazal@terra.com.br> wrote:
Run tn-gw-nav or httptunnel to tunnelize the connection.
--
--------------------------------------
These are my personal opinions
Real email: sanabriaf at yahoo dot com
- Posted by iksrazal on February 27th, 2004
Grant Edwards <grante@visi.com> wrote in message news:<403e20be$0$41291$a1866201@newsreader.visi.co m>...
It as really that easy, thanks. Here in brazil buying removable hard
drives and such just is too expensive. Thanks!!!
iksrazal
