SSH - Revision history

Leo: /* Removing a key from the known hosts file */

2020-01-11T20:02:47Z

‎Removing a key from the known hosts file

Leo at 20:15, 27 April 2012

2012-04-27T20:15:09Z

Leo: /* Removing a key from the known hosts file */

2012-04-27T20:14:53Z

‎Removing a key from the known hosts file

Leo at 20:12, 27 April 2012

2012-04-27T20:12:02Z

Leo: /* Tunneling between any two ports */

2010-07-14T12:38:04Z

‎Tunneling between any two ports

Leo at 12:35, 14 July 2010

2010-07-14T12:35:05Z

Leo: New page: == Tunneling to socks proxy == From here: [http://ubuntu.wordpress.com/2006/12/08/ssh-tunnel-socks-proxy-forwarding-secure-browsing/ ssh-tunnel-socks-proxy] In short: $ssh -D 9999 usern...

2010-04-23T12:39:40Z

New page: == Tunneling to socks proxy == From here: [http://ubuntu.wordpress.com/2006/12/08/ssh-tunnel-socks-proxy-forwarding-secure-browsing/ ssh-tunnel-socks-proxy] In short: $ssh -D 9999 usern...

New page

== Tunneling to socks proxy ==

From here: [http://ubuntu.wordpress.com/2006/12/08/ssh-tunnel-socks-proxy-forwarding-secure-browsing/ ssh-tunnel-socks-proxy]

In short:
$ssh -D 9999 username@ip-address-of-ssh-server
Then set in Firefox to use a SOCKS proxy: “localhost", port 9999

@@ Line 21: / Line 21: @@
  ssh -f user@server.com -L my-local-port:server.com:server-port -N
+== Tunneling OpenVPN connection ==
+Source: https://redfern.me/tunneling-openvpn-through-ssh/
+# Set the OpenVPN server config file to use TCP rather than UDP. This is done by changing the line proto udp to proto tcp in the server config file (normally located at /etc/openvpn/server.conf).
+# Set the OpenVPN client config file to use TCP rather than UDP. You can do this by changing the line proto udp to proto tcp-client in the client config file.
+# Change the OpenVPN client config to connect to localhost rather than the remote server address. This is done by changing the “remote” line of the server to remote localhost 1194
+# Create an SSH tunnel between the client machine and the OpenVPN Server, and forward from remote:1194 to localhost:1194. This can be done by running the command on the client machine (assuming you’re running Linux/Unix with the OpenSSH client binary installed):
+ ssh user@server -L 1194:localhost:1194
+All being well, after making those config file changes and creating your SSH tunnel, you’ll be able to tunnel OpenVPN through SSH.
 == Removing a key from the known hosts file ==
@@ Line 27: / Line 39: @@
  ssh-keygen -R hostname
 == Using ssh with a private/public key ==

← Older revision		Revision as of 20:15, 27 April 2012
Line 1:		Line 1:
			{{TocRight}}
	== Tunneling to socks proxy ==		== Tunneling to socks proxy ==

@@ Line 26: / Line 26: @@
  ssh-keygen -R hostname
+== Using ssh with a private/public key ==
+If you are using svn+ssh or just want automatic login without typing the password whenever using ssh, you may want to consider setting up public-private key authentication between the client and server machine. The server will have the public key, and the client will have the private key. This is how to set it up:
+On the client: generate the public/private key pair
+  cd ~/.ssh
+  ssh-keygen -t dsa
+Copy the public key to your server, and add to ~/.ssh/authorized_keys file, like this:
+  ssh-copy-id remote-machine
+...or:
+  ssh remote-machine 'cat >> .ssh/authorized_keys' < .ssh/id_dsa.pub
+...or, if you prefer the long way (smile), do it like this:
+  scp ./id_dsa.pub user@myserver.com:
+  ssh user@myserver.com
+  myserver>  cat id_dsa.pub >> .ssh/authorized_keys
+  myserver>  rm id_dsa.pub
+  myserver>  logout
+Remember to check that your .ssh/ directory and files in there are not public readable, otherwise someone may steal your private key and get access to your server!
+Done!
+== Turning the keys and identities on and off ==
+You may want to use the following commands or even define aliases as below. Note, ssh -t <seconds> sets timeout for the open key. In the example below 10800 = 3 hours.
+ alias keyon="ssh-add -t 10800"
+ alias keyoff='ssh-add -D'
+ alias keylist='ssh-add -l'
+== Other links and info ==
+* http://sial.org/howto/openssh/publickey-auth/

@@ Line 4: / Line 4: @@
 In short:
- $ssh -D 9999 username@ip-address-of-ssh-server
+ ssh -D 9999 username@ip-address-of-ssh-server
- Then set in Firefox to use a SOCKS proxy: “localhost", port 9999
+ # Then set in Firefox to use a SOCKS proxy: “localhost", port 9999
@@ Line 12: / Line 12: @@
 Say, you want to read a remote server web page, but there is only ssh port open on the server. If you have a valid user account to the server, then you can create a tunnel, like this:
- $ ssh -f user@server.com -L 8080:server.com:80 -N
+ ssh -f user@server.com -L 8080:server.com:80 -N
 Now you can enter the following in your browser: http://server.com:8080
@@ Line 18: / Line 18: @@
 Or in general, -f means sit in background and -N menas do not execute any command:
- $ ssh -f user@server.com -L my-local-port:server.com:server-port -N
+ ssh -f user@server.com -L my-local-port:server.com:server-port -N
+== Removing a key from the known hosts file ==
+Note, you may run this for the hostname of the "old" computer and for the IP address.
+ ssh-keygen -R hostname

@@ Line 10: / Line 10: @@
 == Tunneling between any two ports ==
-Say, you want to read aremote server webpage, but there is only ssh port open on the server. Then you can create a tunnel, like this:
+Say, you want to read a remote server web page, but there is only ssh port open on the server. If you have a valid user account to the server, then you can create a tunnel, like this:
  $ ssh -f user@server.com -L 8080:server.com:80 -N
@@ Line 16: / Line 16: @@
 Now you can enter the following in your browser: http://server.com:8080
+Or in general, -f means sit in background and -N menas do not execute any command:
-Or in general
  $ ssh -f user@server.com -L my-local-port:server.com:server-port -N