Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com This Docu-cast we will show you how to use the SSH SERVER of your Ubuntu server as a proxy for your (remote) internet traffic. This means that you will be able to surf from any computer, through an encrypted tunnel, using your Linux server as a proxy. It will allow you to "secure surf' from any hotspot or even bypass the firewall at your workplace, because the webtraffic between your PC and your server at home is encrypted. Need to have and need to know. - Have an Ubuntu server running with SSH server enabled - Open up a port of your router pointing toward the SSH server on your network : (and the ability to connect OUT over that port from the local network you are on at the moment) - Setup and enable a dyndns service on your server : http://revision3.com/systm/dyndns/ - If needed setup a Dyndns client on your Ubuntu machine using DDclient : http://www.ubuntugeek.com/update-ip-addresses-at-dynamic-dns-services-using-ddclient.html - Know the port and the DYNDNS address of your linux server. Test your external ip. (Without using the SSH-Proxy) In order to test if the SSH proxy tunnel is working later on, we first need to see what your current external IP is. Go to http://www.whatismyip.com and write down your IP. If you are (for example) in a hotspot, we are going to check what your external IP is when you connect to the internet WITHOUT using the SSH proxy tunnel. Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 1
If the setup of the tunnel is successfull, you will see a DIFFERENT external IP address later on. (Then you will see the external IP of the network where your Ubuntu server is on). Download and install Putty. Go to : http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html Download : putty.exe. Save the Exe to your harddrive. (create a link on your desktop) Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 2
Launch the putty.exe Enter the Address of your linux server and the correct portnumber you have setup. Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 3
Configure putty to setup an SSH tunnel. Click on SSH / Tunnels. Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 4
Enter a portnumber for your SSH tunnel. Enter your "source port" number, (in this example i entered 5555) Set the radio buttons to AUTO and DYNAMIC Click ADD. You will see the sourceport after the letter D in the window. Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 5
Save the putty configuration. To save the configuration, click on SESSIONS Enter a name for the session and click SAVE. Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 6
Configure Firefox to use your SSH tunnel as a proxy. Open Firefox Click TOOLS / OPTIONS. Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 7
Configure Firefox to use your SSH tunnel as a proxy. Click on the advanced icon. Choose the NETWORK tab. Click on the SETTINGS button. Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 8
Edit the Proxy settings of your Firefox. Edit the proxy settings to match the portnumber you selected for your SSH proxy and click OK. Set the radio button to MANUAL PROXY CONFIGURATION. Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 9
Open the SSH tunnel using Putty. Open Putty, Select the SSH session you saved earlier. Click on the SSH/TUNNELS and make sure the DYNAMIC option is still selected. Next click OPEN and enter your (linux) username and password. Leave the terminal window open. Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 10
Test your external IP (WITH the SSH-Proxy) Open Firefox and go back to http://www.whatismyip.com The (external) IP that you see should be different from the external ip you saw in the first step. The external IP you see right now is the external IP of your Linux server (at home) not the external ip of the network you are currently on. This means all of your HTTP traffic goes out THROUGH the secure SSH tunnel you created and goes out via the WAN ip of the network where you have your Ubuntu server running. All Done! Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 11
Brought to you by www.knightwise.com and SCREENSTEPS from bluemangolearning.com On the edge of real and Cyberspace, there is one place you can go. Visit www.knightwise.com and subscribe to the Knightcast. Get the latest Knightcast podcasts, kwtv screencast and Howto-pdf's straight into your podcatcher. Tune technology into your way of life and let tech work for you! Visit www.knightwise.com. Or subscribe to the feed by pasting this link into your podcatcher. http://feeds.feedburner.com/feedburner/knightcast This howto was made using SCREENSTEPS. For more information head on over to : http://www.bluemangolearning.com/ Secure surfing using Ubuntu Server, Putty, Firefox and an SSH Proxy Tunnel by www.knightwise.com - 12