Whether your ISP is filtering content or you just want some privacy on the internet, there is always a quick solution, and it is surprisingly easy to set up.
Basically, all you need to do is SSH to any Shell account that you have access to (it can even be your own PC from another location) with the option -D. For example:
ssh -D 7070 user@site.com
will connect to site.com as user, and create a proxy server at port 7070 (this does not need to be set up on the shell).
Then all you have to do is configure your browser/IM/torrent clients to use “localhost” as a SOCKS v5 server. For Firefox, this is in Edit > Preferences (or Tools > Options on Windows). Click the Advanced tab, and then the Network tab under it. Then open Settings, and select Manual Proxy Configuration. Type localhost ONLY in the SOCKS Host box, and type the same port number you used above.
That’s it! To turn the proxy off, close your SSH session and change your browser settings back.
Just yet another use for SSH.
Note: Reader Don McArthur has tipped us off that you might need to make some changes to your SSH server before this will work. If it doesn’t, add these lines to /etc/ssh/sshd_config:
AllowTcpForwarding yes
GatewayPorts yes
TCPKeepAlive yes
Calling all FOSSwire readers! We’re looking for your feedback - answer our reader survey and you could win an awesome FOSSwire t-shirt (we’ll ship anywhere on this planet).


Don McArthur wrote:
Not quite finished. On the sshd server side you need to make sure the following changes are made to /etc/ssh/sshd_config file:
AllowTcpForwarding yes
GatewayPorts yes
TCPKeepAlive yes
…restart the sshd server after you make the changes.
[Thanks for that! I've added the information to the article. --Jacob]
# Posted on 02-Sep-07 at 7:21 pm
diego wrote:
Nice!
# Posted on 02-Sep-07 at 8:37 pm
Ali wrote:
Hi,
That’s a very nice tip. I tried it and it didn’t work for me. I get this error every time I try to open a web site:
‘channel 3: open failed: administratively prohibited: open failed’
I have a free sheell acount with arbornet, maybe they block this kind of traffic? Do you recommend a cetain shell account?
Thanx
# Posted on 04-Sep-07 at 8:24 am
Topopardo wrote:
Fantastic tip! Now I can use my college’s servers as a proxy to access out online library books and more!
# Posted on 04-Sep-07 at 3:29 pm