Hi all,
forgive my bad English, i'll try to explain as clear&short as i can!
That's briefly the network topology i am facing:
MyWorkstation ---> Transparent Proxy (NTLM auth; only allow https port 443) --> internet ---> MyPcAtHome(with SSH Server listening on port 443, and with ddns, so i have a domain)
I run cntlm as a service, i think i configured it properly, in fact using putty i manage to connect successfully to my home ssh server, bypassing in this way the proxy restriction.
Connection->Proxy
Proxy Type: HTTP
Proxy hostname: localhost
Port: (the port CNTML is listening at, for example 5555)
DNS lookup: Auto
Username/Password: (my workstation user/pass)
Cntlm
username: myworkstation username
domain: myworkstation domain
PassLM : myworkstation hashed pwd
PassNT : myworkstation hashed pwd
PassNTLMv2 : myworkstation hashed pwd
Proxy: the proxy address with the port it is listening
Listen: the port cntlm is listening, in this example 5555
As i said, i can successfully connect to my SSH server. What if i want now to use the just created SSH tunnel to browse internet?
I am sure i must set the tunnel options, but should i use the tunnel option in the CNTLM .ini file, or the putty ssh tunnel option? i performed many (unsuccessful) attempts, but clearly i'm missing something, so any help would be appreciated!
Ty for any help !
D.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Solved. I managed to ssh tunnel a local port to remote 443 port, and then specify the local port in the browser proxy options. that was the part i was missing hope that can be useful to someone!
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi all,
forgive my bad English, i'll try to explain as clear&short as i can!
That's briefly the network topology i am facing:
MyWorkstation ---> Transparent Proxy (NTLM auth; only allow https port 443) --> internet ---> MyPcAtHome(with SSH Server listening on port 443, and with ddns, so i have a domain)
I run cntlm as a service, i think i configured it properly, in fact using putty i manage to connect successfully to my home ssh server, bypassing in this way the proxy restriction.
Those are briefly the cntml&putty setups:
Putty:
Session
Host Name: mydomainaddress (of MYPcAtHome)
Connection Type: SSH
Port: 443
Connection->Proxy
Proxy Type: HTTP
Proxy hostname: localhost
Port: (the port CNTML is listening at, for example 5555)
DNS lookup: Auto
Username/Password: (my workstation user/pass)
Cntlm
username: myworkstation username
domain: myworkstation domain
PassLM : myworkstation hashed pwd
PassNT : myworkstation hashed pwd
PassNTLMv2 : myworkstation hashed pwd
Proxy: the proxy address with the port it is listening
Listen: the port cntlm is listening, in this example 5555
As i said, i can successfully connect to my SSH server. What if i want now to use the just created SSH tunnel to browse internet?
I am sure i must set the tunnel options, but should i use the tunnel option in the CNTLM .ini file, or the putty ssh tunnel option? i performed many (unsuccessful) attempts, but clearly i'm missing something, so any help would be appreciated!
Ty for any help !
D.
Solved. I managed to ssh tunnel a local port to remote 443 port, and then specify the local port in the browser proxy options. that was the part i was missing hope that can be useful to someone!