Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Sshuttle - tunnel all your traffic through ssh

github.com

Post reply on HN
Print view View original

41–50 of 70 posts

Re: Sshuttle - tunnel all your traffic through ssh

#41

Post by tlrobinson »

fs111 wrote: post #38
tlrobinson wrote: post #35

NOT all your traffic. This only does TCP. Any DNS, UDP, and other non-TCP IP traffic won't go through the tunnel! I tried sshuttle awhile ago and abandoned it because of this. The only thing worse than no security is a false sense of security.

I personally don't use it for security reasons, but to be able to listen to last.fm easily through a vps in a country, where that is for free. (just one example) Security is never just a software you install, it also depends on you, knowing, what you do.

Sure there are other uses. I'm just making sure people know, because it's being advertised as a VPN alternative, and this problem wasn't obvious to me when I first looked at it.

Re: Sshuttle - tunnel all your traffic through ssh

#42

Post by wyuenho »

chopsueyar wrote: post #19

How would one go about setting this up with a firmware rewritable consumer-grade router? Can I have a ww-drt install act as a client with Sshuttle and install a public key to require no login?

You can have Python running on the DD-WRT box of course, which will probably drastically slow down your router. You can also generate a public key for the router and append it to a remote host's .ssh/authorized_keys file, but for reason number 1 above, it's probably not a good idea. Now if you have a PC box running Vyatta or pfSense, then you might be able to pull this off with minimum impact.

Re: Sshuttle - tunnel all your traffic through ssh

#43

Post by leon_ »

ccarpenterg wrote: post #36
ceejayoz wrote: post #15

Earlier quoted context omitted.

Translation: Yes, if your VPS is in the US.

Yes, It's in the US. I'm not confused anymore.

you don't need shuttle

> ssh -D localhost:8888

then enter localhost:8888 as your socks proxy in your web browser.

Re: Sshuttle - tunnel all your traffic through ssh

#44

Post by sigil »

fs111 wrote: post #40
sigil wrote: post #3

Very cool. I wonder how hard it would be to port the muxer core to C, and run it under tcpclient / tcpserver on either end of the ssh connection.

Click the little "fork" button and let us know, what you came up with :-)

Maybe I will. ;)

A few years back, I wrote a multiplexer / tunneler similar to Sshuttle in Python for a "Go To My PC" style web service. We wanted to tunnel over ssh, but had problems automating the client key generation and first-time connection. So we went with SSL. That and the cross platform requirement (most clients were running Windows) really took the fun out of it.

Re: Sshuttle - tunnel all your traffic through ssh

#48

Post by tianyicui »

tlrobinson wrote: post #35

NOT all your traffic. This only does TCP. Any DNS, UDP, and other non-TCP IP traffic won't go through the tunnel! I tried sshuttle awhile ago and abandoned it because of this. The only thing worse than no security is a false sense of security.

I just tried, it does have the ability to route DNS requests through the tunnel.

Out of curiosity, is it theoretically possible to route other kinds of traffic over this, e.g. UDP, ICMP(ping)? Thanks.

Re: Sshuttle - tunnel all your traffic through ssh

#49

Post by tlrobinson »

tianyicui wrote: post #48
tlrobinson wrote: post #35

NOT all your traffic. This only does TCP. Any DNS, UDP, and other non-TCP IP traffic won't go through the tunnel! I tried sshuttle awhile ago and abandoned it because of this. The only thing worse than no security is a false sense of security.

I just tried, it does have the ability to route DNS requests through the tunnel. Out of curiosity, is it theoretically possible to route other kinds of traffic over this, e.g. UDP, ICMP(ping)? Thanks.

Sure it's possible (see: http://en.wikipedia.org/wiki/IP_over_Avian_Carriers). I don't know why they haven't done it yet.
Post reply on HN