Differences between revisions 2 and 3
⇤ ← Revision 2 as of 2007-05-25 08:44:41 →
Size: 1617
Editor: RaphaelHertzog
Comment: Document setup for going over an HTTPS proxy, not tested
← Revision 3 as of 2007-05-25 08:47:38 → ⇥
Size: 1601
Editor: RaphaelHertzog
Comment: Some fixes
Deletions are marked like this. Additions are marked like this.
Line 9: Line 9:
With the sample config below, you can do "ssh master.overgluck" to connect to master.debian.org via gluck's SSH server running on port 443. Add any other Debian hosts that you plan to connect to. With the sample config below, you can do "ssh master.overgluck" to connect to master.debian.org via gluck's SSH server running on port 443.
Line 30: Line 30:
    ForwardAgent no
    ForwardX11 no

Resources for Debian developers

Is there a way to connect to Debian servers if the SSH port is firewalled?

The machine people.debian.org (currently gluck.debian.org) runs a SSH server on port 443 (usually the "https" port). If your firewall gives you access to this port (or if a proxy does it for you), then you can connect to your account. If you plan to use this access to connect to other Debian hosts, please don't run an ssh-agent on gluck and don't put your private SSH keys over there. Instead you're strongly advised to customize your ~/.ssh/config file and create special entries to connect to other Debian machines.

Direct access to external machines via port 443 allowed

With the sample config below, you can do "ssh master.overgluck" to connect to master.debian.org via gluck's SSH server running on port 443. 

Host *.overgluck
    ProxyCommand ssh -q -a -x gluck.debian.org 'nc -w1 $(basename %h .overgluck) 22'
    ForwardAgent no
    ForwardX11 no

Direct acess forbidden, going through a proxy

If you have to go through an https proxy, you can install the connect-proxy package and use something like this in your ~/.ssh/config: 

Host gluck.debian.org people.debian.org gluck
    ProxyCommand connect-proxy -H <proxy>:<port> gluck.debian.org 443
    ForwardAgent no
    ForwardX11 no

Host *.overgluck
    ProxyCommand ssh -q -a -x gluck.debian.org 'nc -w1 $(basename %h .overgluck) 22'
    ForwardAgent no
    ForwardX11 no

(Reference: RT ticket [https://rt.debian.org/Ticket/Display.html?id=69 #69])