HP-UX Secure Shell Getting Started Guide

Example 5-1 Connecting to an External Server Using a DanteSOCKS Proxy

Enter the following command to connect to an external server using a DanteSOCKS proxy:

# ssh -o "ProxyCommand connect -S proxy-server %h %p" external-server

The system is connected to external-server through proxy-server.

Example 5-2 Data Transfer Using a DanteSOCKS Proxy

Enter the following command to transfer data using a DanteSOCKS proxy:

# scp -o "ProxyCommand connect -S proxy-server %h %p" external-server

:remotefile localfile

# sftp -o "ProxyCommand connect -S proxy-server %h %p" external-server

The system is connected to external-server using proxy-server, and remotefile is copied. to

localfile.

Dynamic Port Forwarding

You can configure the dynamic port forwarding feature of HP-UX Secure Shell to serve as a

SOCKS server, instead of forwarding from specific ports on the local and remote servers. The

dynamic port forwarding feature in HP-UX Secure Shell replaces the socks proxy. To connect to

a SOCKS server, you need a socks client, or the actual application client must have the socks

client feature. In local and remote port forwarding, the ssh client statically configures the port

to which the application client will connect. However, in dynamic port forwarding, HP-UX

Secure Shell provides an option that enables the application client to choose the port that must

be connected in the remote system dynamically. For example, enter the following command to

specify the port number that ssh must listen on:

# ssh -D <port number> localhost

In the following command, the port to be connected in the remote machine is picked up by %p .

The SOCKS server on the specified <port number> then connects to the port %p running on

the specified host (%h).

# ssh-o "ProxyCommand connect -S proxy-server:<port number> %h %p"

external-server

NOTE: Currently, both the SOCKS4 and SOCKS5 protocols are supported.

Dynamic Port Forwarding Process

Figure 5-1 (page 55) illustrates the dynamic port forwarding process.

54 Configuring HP-UX Secure Shell as a SOCKS Proxy