29 Comments
- banih, on 10/12/2007, -0/+11This is a nice writeup, but it misses one of the coolest features: SOCKS 4 & 5 Proxy Server. You can use your home machine as a secure proxy server without messing with any config files.
Run this in the shell:
ssh -qTfnN2 -D 8080 user@machine-running-ssh-server
Then set your laptop's proxy server settings (in System Preferences --> Network for Mac OS X) to 127.0.0.1 port 8080.
Search for 'SOCKS' on the following link for a better explanation:
http://www.pantz.org/blog/blog-05-2006.shtml
One downside; as of Safari.app Version 2.0.4 (419.3), Safari crashes when you go to a secure (https) website. - inactive, on 10/12/2007, -2/+12Hey, imagine that. You download some software for a server, install it on your machine, and you have a home server! WOW.
- kc0re, on 10/12/2007, -0/+7Just use a good password people! Telling all these mac users to turn on their SSH service is just asking for people to get brute forced. I run an SSH server at my house that I proxy all my IM and web through when I am on the road, but I use good password security too.
- NTolerance, on 10/12/2007, -0/+4Change your SSH port from 22 to something obscure. Stupid, I know, but it actually prevents a lot of unauthorized login attempts.
- yonis, on 10/12/2007, -0/+4No doubt - My home machine gets SSH-scanned several times from China every day, in addition to plenty of bad FTP connection attempts.
I use a 17-character password, but I'm still a little worried about it. - bdxphoenix, on 10/12/2007, -0/+3Yeah, my computer got huge SSH requests from places that shouldn't be requesting SSH from me. I started using key based security (turning off password all together), still was worried and ended up only allowing from a white-list (since I only SSH into my computer from so many places).
In short, unless you run a massive hosting company I would just set up a whitelist for computers you're going to use. - davef1, on 10/12/2007, -0/+3
It is possible to modify ssh to use a one time password list for
logging in from insecure locations. - cheeze69, on 10/12/2007, -0/+3Man, I tried to phrase that so it was not overly offensive. Obviously I failed.
Oh, and you hit the wrong reply link. Damn that text mode stuff! ;) - macro, on 10/12/2007, -0/+2or use xp remote desktop on chosen port with multiple login patch...
- Teaboy, on 10/12/2007, -0/+2Or use UltraVNC which is open source, supports encryption and Windows logins.
- NTolerance, on 10/12/2007, -0/+2From TFA:
"When the script stops and asks you for "CYGWIN=" your answer is ntsec tty."
I prefer "nontsec tty". "ntsec tty" will make it such that any files created with that cygwin account cannot be accessed by any other users of the system, including administrators. You'll run into problems if you copy those files to other PCs that are using different accounts and whatnot. - Archon810, on 10/12/2007, -0/+2so here are my 2 cents:
cent 1: if you own a Linksys WRT-54 series router, download DD-WRT or HyperWRT firmware and then enable sshd. That's it, it'll be always available as long as your router is up and there's nothing to install! No separate boxes, nothing, just the router.
cent 2: get RealVNC enterprise (yeah, not free, but some things are worth it). AES 256bit encryption built in, so no need for ssh tunnels. Also, other small things in it make it much better than TightVNC or other free versions (like using Windows login instead of separate VNC one). - archiecstll, on 10/12/2007, -1/+2I use freesshd instead of openssh. It does all I need it to do, and takes much less time for me to configure. But other people have different needs...
- BostonMark, on 10/12/2007, -0/+1Same thing:
http://www.allthingsmarked.com/2006/08/17/how-to-set-up-a-windows-ssh-server-for-vnc-tunneling/ - burke, on 10/12/2007, -0/+1Hey, I've been trying to figure out how to do that. Thanks.
- NTolerance, on 10/12/2007, -0/+1True, but having cygwin installed gives you a wealth of Linux tools on your system.
- antdude, on 10/12/2007, -0/+1How about CopSSH: http://www.itefix.no/phpws/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=12&MMN_position=22:22 ? I use it at home.
- pr0cty, on 10/12/2007, -0/+1how is freenx compared to ssh cmd line/ X11 fowarding...and current vnc software?
- Altotus, on 10/12/2007, -0/+1Interesting. I would suggest that if you run SSH server on your home PC that you disallow password logins (which the article tells you to setup). Password logins are just asking to be brute-forced. You owe it to yourself to learn how to create a key and use it.
Incidentally, with regard to Linux it doesn't take a genius to setup -- it's generally preconfigured and enabled by default so no setup is necessary (unless you want to disable password logins). - GarrettC, on 10/12/2007, -0/+1I agree, I miss not having my terminal in Windows.
It's so easy to install stuff, for example. If I want to get SSH up and going, I just "sudo apt-get install ssh"
And I'm done. :) - warble, on 10/12/2007, -1/+1still cutting your teeth on Digg it seems.
- 5h4rk, on 10/12/2007, -0/+0How can I do this with Linux?
- Altotus, on 10/12/2007, -0/+0NX is great. I highly recomment it. It groks X11, VNC, and RDP.
- critic, on 10/12/2007, -4/+2@cheeze69...so do you have to be an ***** to run 'nix.
Seems like most penguin users I know are. You suck as much as Mac fan bois.
FWIW I cut my teeth on CPM-80 back when your mama was still wiping your ass.
l33t dickwad - agrahimi, on 10/12/2007, -2/+0I use Bitvise WinSSHD along with their Tunnelier program on my laptop. It was extremely easy to configure and automatically generated encrypted, secure keys. What I really like though is the zero configuration method of using RDP (Microsoft's Remote Desktop that is actually ahead of VNC in many areas although its windows only).
- cheeze69, on 10/12/2007, -6/+2Probably one reason you can never get it to work is because you've never bothered to really learn to use a computer and instead, as you mentioned, only use GUI newb tools.
Commandline is not a dirty word nor is it overly difficult. Admittedly, cmdline on a Winbloze box is not exceptionally useful like it is on a *nix box, but it still can be fun and functional to play with.
Give commandline a try sometime, preferrably on a *nix box and actually spend a couple weeks using it. Personally, I miss having a truly useful shell on a Winbloze box, at least without having to install a bunch of cygwin stuff. - critic, on 10/12/2007, -4/+0I've tried this about a dozen different times and can't get this or VNC to ever work.
I have the free version of ZoneAlarm and have no direct control of the ports that need to be opened.
Then I read taht SSH was only a command line interface and lost interest alltogether.
Props to those who use this tho. - frukt, on 10/12/2007, -4/+0Having an SSH server at home to log into and do kewl stuff was all joy until I realized that most places I used to make the connection weren't all that trustworthy and my passwords might very well have been stolen by keyloggers and such. Now the only port I have open is TCP/80; lighttpd running in chroot jail, of course. Something to keep in mind.


What is Digg?
The Digg Toolbar for Firefox lets you Digg, submit content, and keep track of Digg even when you're not on the Digg site. Download the official