Comments on: How to use SSH Via HTTP Proxy using Corkscrew in Ubuntu

By: Jim Hogan

Jim Hogan — Mon, 30 Jan 2012 15:28:04 +0000

Worked like a charme THANK YOU !

By: Johan

Johan — Thu, 08 Apr 2010 11:35:59 +0000

Is this different from just defining an http proxy in putty? That seems to do about the same thing doesn’t it?

I also saw a way to get through multiple proxies and or turn ssh into real https traffic on http://www.saulchristie.com/how-to/bypass-firewalls . Looks bit complicated to me to be honest but seems to say that this corkscrew or putty config won’t work on its own in some schools.

By: Richard Neill

Richard Neill — Thu, 02 Jul 2009 21:45:04 +0000

Excellent howto.

One catch is that the majority of https proxies are configured to only allow forwarding to port 443. The https protocol supports any destination port on the far-end machine (eg 22), but typical corporate firewalls insist that the dest-port must be 443.

The answer is to run your ssh server on port 443, or set up an inbound firewalling rule to redirect connections from 443 to 22.

Also worth mentioning that SSH -R allows reverse-port-forwarding. So once you have outbound SSH, you get inbound SSH for free.

By: Proxy

Proxy — Thu, 29 Jan 2009 15:10:59 +0000

Your post is quite interesting and useful. I have bookmarked it for later use to see what other great articles you post!

By: Man-wai Chang

Man-wai Chang — Wed, 07 Jan 2009 11:19:12 +0000

Would it be better to just use Squid?

By: Jim

Jim — Wed, 31 Dec 2008 05:41:48 +0000

@John Zbesko,

I thought the author was describing exactly what you are talking about. Strict HTTPS proxy? Port 443? What did you understand Ubunutgeek to be talking about?

By: John Zbesko

John Zbesko — Tue, 30 Dec 2008 16:16:31 +0000

As kuminamoya says, this tunneling is easily detected if the proxy uses stateful packet inspection. However, if the ssh session is made through https, then it should be private. How might one accomplish this?

By: Ramesh

Ramesh — Mon, 29 Dec 2008 15:22:16 +0000

Hi Guys, I do it by configuring sshd_config with port 443 and connect ssh -p 443 user@host….. Does this CorkScrew does anything better..

Cheers
Ramesh

By: Andrea Ratto

Andrea Ratto — Sun, 28 Dec 2008 21:00:20 +0000

I used connect-proxy a Debian specific little executable that does just the same.
I also found out that the proxy must allow ssl access to the port you want to connect to, otherwise these tool won’t work.

By: kuminamoya

kuminamoya — Sat, 27 Dec 2008 15:53:58 +0000

You should add that (1) this could violate the security policy in many companies, and (2) that this is relatively easy detectable at the proxy. So it would be a good idea to talk to your IT guys before you try this.