SSHD on an additonal IP address

Have an idea that will make Phoenix even better? Post it here!

SSHD on an additonal IP address

Postby hafner on Tue Sep 26, 2006 4:25 pm

Code: Select all
Welcome to the Phoenix Network users server

SSH IP: 208.98.27.3

Currently there is only 1 additional IP, 208.98.27.4, the remaining
IPs (upto .100) will be readded throughout the week.
If Phoenix Network has so many IPs, can port 443 of one of these used
exclusively for SSHD, too?
I know, there's the hack
http://old.homeip.net/martin/ssh-https.html which allowes sharing of
port 443 for HTTPD and SSHD, but I feel uncomfortable about the
security issues and possible delay ("It waits for one second for data
from the client"). So if there are enough IP numbers, it's probably
better not to share the port.

Benefit: PuTTY can connect even through restrictive firewalls (i.e.
firewalls allowing HTTPS).

Regards
Thomas
Last edited by hafner on Fri Sep 29, 2006 11:19 pm, edited 1 time in total.
hafner
Contributer
Contributer
 
Posts: 73
Joined: Tue Mar 07, 2006 2:18 pm
Location: München (Germany)

Postby ultramancool on Wed Sep 27, 2006 10:50 am

Yes, I would very much appreciate this move too. Another option is anyterm (a very nice ajax terminal), which would make it even easier for people behind restrictive firewalls. Very Happy
ultramancool
Contributer
Contributer
 
Posts: 27
Joined: Wed Jun 14, 2006 9:47 pm

Postby thebeast on Wed Sep 27, 2006 6:43 pm

Hack? WTF means hack? Phoenix is using everything legal and no hacks needed here. So find a another suggesstion for that that will be better ;-)
Sarunas B.
Phoenix Network Still Alive!
(\__/)
(='.'=) This is Bunny. Copy and paste bunny into your
(" )_(" ) signature to help him gain world domination.
thebeast
Phoenix Veteran
Phoenix Veteran
 
Posts: 646
Joined: Wed Mar 23, 2005 1:20 pm
Location: Lithuania

Postby hafner on Fri Sep 29, 2006 1:10 pm

thebeast wrote:Hack? WTF means hack? Phoenix is using everything legal and no hacks needed here. So find a another suggesstion for that that will be better Wink
Already done: the hack would be to let HTTS and SSH share the same port. The other suggestion is to let SSHD listen alone on port 443 for exactly one IP address (as I understand there are several IP addresses available, so the other IP addresses are for HTTS, so there's no conflict). See above for details. Can't see cracking or similiar when doing so.

Regards
Thomas
Last edited by hafner on Fri Sep 29, 2006 11:17 pm, edited 1 time in total.
hafner
Contributer
Contributer
 
Posts: 73
Joined: Tue Mar 07, 2006 2:18 pm
Location: München (Germany)

Postby BanditZA on Fri Sep 29, 2006 6:46 pm

I would really appreciate this, as I would love to be able to access my shell account from school...but the firewall sucks! Crying or Very sad If this were possible i could also tunnel thru the shell and browse freely and securely...

Bandit
To follow the path:
look to the master,
follow the master,
walk with the master,
see through the master,
become the master.
BanditZA
Contributer
Contributer
 
Posts: 62
Joined: Sat Feb 04, 2006 5:59 pm
Location: Durban, South Africa

Postby Sephy on Sat Sep 30, 2006 1:24 am

thebeast wrote:Hack? WTF means hack? Phoenix is using everything legal and no hacks needed here. So find a another suggesstion for that that will be better Wink

This is the good, competent and legal version of hack, not the blackhat version that's popularized by the media and script kiddies.

But really, we really don't need this. If you can't SSH to infinity from somewhere because you're restricted by a firewall, then you probably shouldn't be trying to do that in the first place.
Sephy
Contributer
Contributer
 
Posts: 36
Joined: Sat Jul 01, 2006 9:00 pm

Postby slashfoo on Sat Sep 30, 2006 4:26 am

Sephy wrote:If you can't SSH to infinity from somewhere because you're restricted by a firewall, then you probably shouldn't be trying to do that in the first place.


I couldn't have worded it better than that, but it is a very valid suggestion, since sometimes your policy does permit the access to external services, but your firewall's admin is too lazy to change the tables.

Anyways, I consider this should be evaluated by Phoenix's admins.
Slashfoo
"Hello my friend, stay a while and listen..."
--- Deckard Cain (Diablo game)
slashfoo
Contributer
Contributer
 
Posts: 70
Joined: Tue Sep 05, 2006 12:44 pm


Return to Suggestions

Who is online

Users browsing this forum: No registered users and 1 guest

cron