Comments on: SSH Tunnels http://blog.roweware.com/2010/02/10/ssh-tunnels/ Ramblings about things I think I know... Wed, 07 Sep 2011 13:12:56 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: Dave Rowe http://blog.roweware.com/2010/02/10/ssh-tunnels/comment-page-1/#comment-1471 Dave Rowe Fri, 27 Aug 2010 15:10:33 +0000 http://blog.roweware.com/?p=183#comment-1471 Hi - I can't _quite_ tell if this is a spam comment for a personal VPN solution, but I'll reply for others here. A SOCKS proxy does forward traffic over the SSH tunnel, so the traffic is encrypted (via the SSH tunnel), and Java/Flash are still delivered over HTTP so, that traffic will also use the SSH tunnel. Ultimately, yes, a VPN solution is 'better', though I would contend that an SSH tunnel is 'easier'. Regardless, my purpose in using the SSH tunnels isn't to circumvent _others_ firewalls / routers, necessarily, but to also punch a hole in my own, so I can access my local network (at home) from the road without exposing anything except an SSH port, which is quite secure. Hi – I can’t _quite_ tell if this is a spam comment for a personal VPN solution, but I’ll reply for others here. A SOCKS proxy does forward traffic over the SSH tunnel, so the traffic is encrypted (via the SSH tunnel), and Java/Flash are still delivered over HTTP so, that traffic will also use the SSH tunnel. Ultimately, yes, a VPN solution is ‘better’, though I would contend that an SSH tunnel is ‘easier’.

Regardless, my purpose in using the SSH tunnels isn’t to circumvent _others_ firewalls / routers, necessarily, but to also punch a hole in my own, so I can access my local network (at home) from the road without exposing anything except an SSH port, which is quite secure.

]]> By: vpn hosting http://blog.roweware.com/2010/02/10/ssh-tunnels/comment-page-1/#comment-1470 vpn hosting Fri, 27 Aug 2010 15:02:32 +0000 http://blog.roweware.com/?p=183#comment-1470 No, that will not get the job done by itself. When I travel to China I use a personal VPN, to unblock web sites and make sure all my data is securely encrypted out of country. Since the VPN encrypts the network connection I'm not worried about Java and Flash leaking information or my email getting hacked. No, that will not get the job done by itself. When I travel to China I use a personal VPN, to unblock web sites and make sure all my data is securely encrypted out of country. Since the VPN encrypts the network connection I’m not worried about Java and Flash leaking information or my email getting hacked.

]]>