Re: Time for a new FWTK?

["Ge' Weijers" <ge () progressive-systems com>]

On Tue, 25 Nov 1997, -= ArkanoiD =- wrote:

> ..but there is no good proxy for incoming ssh: i tried to hack sshd to make
> one; it works but it is so ugly.. :(

Another hack: get the latest socks5 package from NEC, socksify ssh on
your clients (a configurable option for ssh), run the socks server on
your firewall, and only allow incoming connections that go to port 22 on
machines that you trust. Disallow password authentication on those
machines.

For a little extra security against probes you can mandate the use of
plaintext passwords on this connection.

NEC also has DLLs that transparently 'socksify' programs for Windows, so
this may work from Windows ssh too.

Ge'

Ge' Weijers                                Voice: (614)326 4600
Progressive Systems, Inc.                    FAX: (614)326 4601
2000 West Henderson Rd. Suite 400
Columbus, OH 43220           http://www.Progressive-Systems.com