Hi all, I need to give a friend in China access to some websites that are blocked by China. I'm think that the way to do this is to setup a proxy for him (a VPN is no option for now) Anyone here who can give me some info on what to use and how to do this. The server that I would like to do this on is from me, located in a data cente, and running Debian Etch.
If you trust them you can give them ssh access, configure a squid proxy on the machine binding to localhost and allowing access only from localhost. They then can do an ssh port forward to their own localhost and then configure their browser to use proxy localhost port 3128. connections to localhost 3128 will be forwarded over the secure tunnel to your server which will then make the web page requests on their behalf. The Chinese will not be able to know what hit them as they cannot inspect traffic inside the ssh tunnel.
Yes I trust them (they are Euro friends who are at the Olympics, and who WILL win some medals). Your way of doing this does sound like a good way to do it. Now I need to find a way to set this up. Once again thank you for the info.
All you need is to setup squid on the server in question. then give them an ssh login and show them how to port forward and (setup a proxy in the browser of their choice) I am guessing they will be using windows so they will need putty and here is a tutorial on port forwarding with putty. http://www.cs.uu.nl/technical/services/ssh/putty/puttyfw.html On linux it is quite easy all you need is this Code: ssh -L 3128:localhost:3128 <hostname>
Okay.. Got it all working nice, but did not manage to use it with Putty for some reason. The Windows XP user is now using "Plink" to create the SSH connection. Plink is from the same creator as Putty.