<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>Besides, you can carry Putty in your pocket in a USB key so there is nothing to install<br></span></div><div> </div><div>Raul Suarez<br><br></div><div>Technology consultant<br>Software, Hardware and Practices<br>_________________<br>Twitter: rarsamx<br>http://rarsa.blogspot.com/ <br>An eclectic collection of random thoughts<br><div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"><div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"><font size="2" face="Arial"><hr size="1"><b><span style="font-weight:bold;">From:</span></b> John Van Ostrand <john@netdirect.ca><br><b><span style="font-weight: bold;">To:</span></b> KWLUG discussion <kwlug-disc@kwlug.org><br><b><span style="font-weight: bold;">Sent:</span></b> Tuesday, September 13, 2011 5:16:33
PM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: [kwlug-disc] Is there a way that I can https Proxy into my lan's http pages?<br></font><br>----- Original Message -----<br>> I want to be able to access my home lan from abroad without any<br>> special tools and have more than one web gui that I would like to<br>> access but I want to make sure that I'm not relying on their security<br>> only their usefulness.<br><br>It's the "without special tools" that is the challenge here.<br><br>Typically when one wants remote access to more than one service on a network the solution is to use a universal solution instead of one that just works for the few cases. Almost certainly people find other things they want to connect to and eventually they end up with a VPN.<br><br>So here are what might be the best options to date.<br><br>SSH tunneling. This requires an SSH client but fortunately they are installed by default on Linux. Putty is
the SSH tool for Windows. This is one of the limited options, but it can be useful. The idea is that you only expose SSH to the Internet. SSH allows TCP tunnels so you can access any service on your network that uses TCP (like web servers.) Putty and Linux's SSH have the same command line. So if you do this:<br><br> ssh -L 8080:hostname:80 myserver.dyndns.org -l username<br><br>After logging into "username" to your ssh server, you can point your browser to <a href="http://localhost:8080" target="_blank">http://localhost:8080</a> and it will tunnel you through to the web server on "hostname". <br><br>You can also do multiple by adding additional -L arguments:<br><br> ssh -L 8080:hostname:80 -L 8081:otherhost:80 myserver.dyndns.org -l username<br><br>The above command connects to hostname and otherhost. Note that I had to use 8081 as the local port so it would not conflict with the first tunnel. Again open a browser ant point it
to <a href="http://localhost:8080" target="_blank">http://localhost:8080</a> or <a href="http://localhost:8081" target="_blank">http://localhost:8081</a> and you'll get your home servers.<br><br>This has some security issues that can be mitigated so if you chose this make sure you ask about securing it.<br><br>The full-strength option is a VPN. There are several choices here including ones that work well with Windows (like PPTP) and ones that require add-on software (openVPN) but work with anything.<br><br><br>-- <br>John Van Ostrand <br>CTO, co-CEO <br>Net Direct Inc. <br>564 Weber St. N. Unit 12, Waterloo, ON N2L 5C6 <br>Ph: 866-883-1172 x5102 <br>Fx: 519-883-8533 <br><br>Linux Solutions / IBM Hardware <br><br><br>_______________________________________________<br>kwlug-disc mailing list<br><a ymailto="mailto:kwlug-disc@kwlug.org" href="mailto:kwlug-disc@kwlug.org">kwlug-disc@kwlug.org</a><br><a
href="http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" target="_blank">http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org</a><br><br><br></div></div></div></div></body></html>