X-Spam-Check-By:	sourceware.org
Message-ID:	<1161879106.4540de42eeb55@imp6-g19.free.fr>
Date:	Thu, 26 Oct 2006 18:11:46 +0200
From:	Teggy P Veerapen <tve DOT ml AT online DOT fr>
To:	cygwin AT cygwin DOT com
Subject:	Re: How to go through a company proxy with ssh ?
MIME-Version:	1.0
User-Agent:	Internet Messaging Program (IMP) 3.2.5
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

Hi,

Thanks guys for all these informations ... In fact, I have tried both solutions
connect and corkscrew but I haven't been able to connect through the proxy with
neither utility. I am getting a forbidden message and if I turn debug option on
when using connect, I get something like that:

---8<---------------
...
DEBUG: begin_http_relay()
DEBUG: >>> "CONNECT 82.231.204.246:80 HTTP/1.0rn"
DEBUG: >>> "rn"
DEBUG: <<< "HTTP/1.0 403 Forbiddenrn"
DEBUG: http proxy is not allowed.
FATAL: failed to begin relaying via HTTP.
ssh_exchange_identification: Connection closed by remote host
---8<---------------

I would presume that the proxy is somehow checking that http requests are going
through and all it's seeing is ssh requests. Does that seem plausible to you
that the proxy is indeed checking the request ?

Or am I making a mistake when using the utility (configuration seems fairly
simple and straightforward to me) ?

Here is what I have in $HOME/.ssh/config
---8<---------------
host a.b.c.d
    port 80
    identityfile /cygdrive/c/teggy/dev/privkey.txt
#   ProxyCommand corkscrew genproxy 8080 %h %p
    ProxyCommand connect -d -H genproxy:8080 %h %p
---8<---------------

and I am running the following command:
$ ssh a.b.c.d

If you have any other solution, I'll be glab to hear about it. Otherwise I'm
thinking about using http tunnel ... Any recommendation ?

ps: Apologies if this message is not attached the thread; but I couldn't make a
reply to previous posts since I was not subscribed to the mailing list.

Cheers,

Teggy

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -