Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

One good trick that the article could add is getting around NTLM-authenticated HTTP proxies, which are frequently found in schools and workplaces. First, set up cntlm or ntlmaps to run a local HTTP proxy that strips the authentication from the real proxy. This is because almost all software that can handle authenticated proxies (including corkscrew) can only handle basic auth, but not NTLM. Then, configure ssh to use corkscrew:

ProxyCommand /usr/bin/corkscrew localhost 3128 %h %p

Finally, set up the socks proxy (most of these proxies only allow outgoing connections over ports 80 and 443):

ssh -ND2345 -p443 host

I use this technique constantly at school to browse the web unrestricted and with privacy.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: