Comments on: ssh oneliners http://www.bofh-hunter.com/2008/04/08/ssh-oneliners/ Admin Spotting for Fun and Profit Fri, 16 Jul 2010 09:41:46 +0000 hourly 1 http://wordpress.org/?v=3.0 By: jperrin http://www.bofh-hunter.com/2008/04/08/ssh-oneliners/comment-page-1/#comment-37 jperrin Wed, 16 Apr 2008 13:45:11 +0000 http://www.bofh-hunter.com/?p=23#comment-37 good stuff! Thanks for the firefox updates and additional details. good stuff! Thanks for the firefox updates and additional details.

]]> By: Gerard Braad http://www.bofh-hunter.com/2008/04/08/ssh-oneliners/comment-page-1/#comment-36 Gerard Braad Wed, 16 Apr 2008 12:37:14 +0000 http://www.bofh-hunter.com/?p=23#comment-36 This is the following of what I do: ssh -D 8080 -f -C -q -N [username]@[ssh server] -D 8080 : This basically does a lot of dynamic stuff and makes it behave as a SOCKS server. Of course you could use any non privileged port here (above 1023). -f : This will fork the process into the background after you type your password. -C : Turns on compression. -q : Quiet mode. Since this is just a tunnel we can make it quiet. -N : Tells it no commands will be sent. (the -f will complain if we donÂ’t specify this) In firefox use about:config and configure the following entries network.proxy.no_proxies_on : localhost, 127.0.0.1, 192.168.0.0/24, .[companydomain.com] network.proxy.socks : 127.0.0.1 network.proxy.socks_port : 8080 network.proxy.socks.remote_dns : true network.proxy.socks_version : 5 network.proxy.type : 1 Especially remote_dns is a good thing, else your DNS requests will still be on the local DNS servers. This is the following of what I do:

ssh -D 8080 -f -C -q -N [username]@[ssh server]

-D 8080 : This basically does a lot of dynamic stuff and makes it behave as a SOCKS server. Of course you could use any non privileged port here (above 1023).
-f : This will fork the process into the background after you type your password.
-C : Turns on compression.
-q : Quiet mode. Since this is just a tunnel we can make it quiet.
-N : Tells it no commands will be sent. (the -f will complain if we donÂ’t specify this)

In firefox use about:config and configure the following entries

network.proxy.no_proxies_on : localhost, 127.0.0.1, 192.168.0.0/24, .[companydomain.com]
network.proxy.socks : 127.0.0.1
network.proxy.socks_port : 8080
network.proxy.socks.remote_dns : true
network.proxy.socks_version : 5
network.proxy.type : 1

Especially remote_dns is a good thing, else your DNS requests will still be on the local DNS servers.

]]>