Tunneling HTTPS traffic via a PUTTY/SSL tunnel with SOCKS

httpsputtysocks-proxy

I have configured a SOCKS ssh tunnel to a remote proxy, and set my Firefox to use localhost:<port> as a SOCKS proxy. My intention is to tunnel outgoing HTTP/S connections from my machine via a specific 3rd party server I own (on AWS).

In my testing, HTTP UTLs are forwarded properly (e.g. when I access http://jsonip.com/ from my computer I do get the server's IP)

However, whenever I try to reach an HTTPS address, I get this error:

The proxy server is refusing connections

How do I debug/fix it?

My PUTTY tunnel config is simply (some random source port number + dynamic checked):

enter image description here

P.S. I'm aware I might need to manually accept SSL certificates. The reason I'm doing this is to resolve problems using gmail as an outbound SMTP service.

Best Answer

I managed to pull this off by switching from PUTTY to command line SSH:

ssh -D 9998 user@myserver.com

ssh -ND 9998 user@myserver.com

(Not sure which one of these did it)

Related Solutions

Linux – SSH tunneling for bypassing firewall (http and socks)

This turned out to be much easier than I thought, what I was doing wrong was trying to do everything with one single command (which should actually be possible, given that I only need to run commands on LOCAL).

The only thing that needed to be done was 1) setting up a reverse tunnel between LOCAL and REMOTE, and then starting dynamic port forwarding on LOCAL.

I have now working internet access on REMOTE which is tunneled through LOCAL, socks applications are set up to use the forwarded port, which redirects to the dynamic port forwarding running on LOCAL.

LOCAL:> ssh -D SOCKS_PORT local_user@localhost -p LOCAL_SSH_PORT

LOCAL:> ssh -R SOCKS_PORT:localhost:SOCKS_PORT remote_user@REMOTE -p REMOTE_SSH_PORT

Linux – How to tunnel HTTP over SSH via SOCKS

Your SSH command with -D is fine (so the SOCKS will tunnel it's just the connecting to the SOCKS via HTTP, that you have to sort out)

I get good output with

curl --socks5 127.0.0.1:8080 http://blah

but I get the same wrong output you get if I do

 curl --proxy 127.0.0.1:8080 http://blah

So, firefox is connecting as if it's an HTTP Proxy

Looking at the firefox window

manual config YES

you said you ticked "use this proxy server for all protocols" That is a totally wrong move! You want to enter a SOCKS proxy, and if you do that then the SOCKS box get nulled/greyed out and you can only enter an HTTP Proxy.

So don't tick that.

And do, enter the socks proxy ip.

and remove where it says no proxy for 127.0.0.1,localhost . if it says that, which is default.

Best Answer

Related Solutions

Linux – SSH tunneling for bypassing firewall (http and socks)

Linux – How to tunnel HTTP over SSH via SOCKS

Related Question