Another, much cleaner way is, of course, to compile ssh with SOCKS support. Most firewall products will support that, too. One advantage is that, if configured right on your client, you can transparently use ssh both to machines inside and outside yor firewalled LAN. -Michael > > Adam Shostack wrote: > > And SSH can be tunneled via most companies' SSL > > 'proxies.' > > Exactly, and that's because most "SSL" proxies know nothing about > the SSL protocol; they just use the HTTP CONNECT extension method > to build an HTTP-based circuit gateway, or use some other circuit > mechanism (e.g., Raptor's older httpd doing transparent relaying > on 443/tcp). >
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 12:54:09 PDT