The Daily Build

Icon

Software Development, version 3.0

Tightening UFW Firewall Rules to Limit SSH Access

The auth.log on one of my servers (really, on all of the servers I have access to) is full of stuff like this: Dec 8 03:19:33 localhost sshd[4718]: User root from 10.1.2.3 not allowed [...] Dec 8 03:19:35 localhost sshd[4721]: Invalid user db2inst1 from 10.1.2.3 Dec 8 03:19:38 localhost sshd[4723]: User root from 10.1.2.3 not [...]

Read the rest of this entry »

Using SSH for IPv6-enabled HTTP Proxying

My ISP has apparently made no progress whatsoever with IPv6, but I’ve got an IPv6 enabled VPS. SSH makes it trivial to use that VPS as a SOCKS5 proxy. Just do: ssh -D 8080 myvps.example.com Then set your browser’s SOCKS proxy to localhost:8080. In Firefox on Linux, this is Edit > Preferences > Advanced > [...]

Read the rest of this entry »

Use SSH to Forward Multiple Protocols to Multiple Machines

Let’s say you have a half-dozen machines at work you want to log into. Instead of setting up a remote forwarding connection from each of those machines, you can have the connection from your main machine perform multiple forwardings instead of just one. This even works if some of the machines don’t support ssh.

Read the rest of this entry »

Open an SSH Tunnel in Four Seconds or Less

As I mentioned in a previous post on ssh configuration, your config file can specify a variety settings for each server. In fact, the Hosts you use don’t even have to exist! Consider the following snippet in your ~/.ssh/config.

Read the rest of this entry »

Use Local SSH Forwarding to Reduce the Number of Manual Hops

Local port forwarding is the same as remote port forwarding but works in the opposite direction. An example is the clearest way to explain…

Read the rest of this entry »

How to Use SSH Remote Port Forwarding to Set Up Secure Tunnels

Ssh tunneling can be a bit mind bending at first, but it’s simple when you get used to it.

Read the rest of this entry »

How to Tell SSH Who You Are

Do you log in to several servers with different usernames via ssh? Save typing by telling ssh which username to use on each server.

Read the rest of this entry »