Need to give a friend (in China) access to some news websites

Discussion in 'Server Operation' started by edge, Jul 31, 2008.

  1. edge

    edge Active Member Moderator

    Hi all,

    I need to give a friend in China access to some websites that are blocked by China.
    I'm think that the way to do this is to setup a proxy for him (a VPN is no option for now)
    Anyone here who can give me some info on what to use and how to do this. The server that I would like to do this on is from me, located in a data cente, and running Debian Etch.
  2. topdog

    topdog Active Member

    If you trust them you can give them ssh access, configure a squid proxy on the machine binding to localhost and allowing access only from localhost.

    They then can do an ssh port forward to their own localhost and then configure their browser to use proxy localhost port 3128.

    connections to localhost 3128 will be forwarded over the secure tunnel to your server which will then make the web page requests on their behalf.

    The Chinese will not be able to know what hit them as they cannot inspect traffic inside the ssh tunnel.
  3. edge

    edge Active Member Moderator

    Yes I trust them (they are Euro friends who are at the Olympics, and who WILL win some medals).
    Your way of doing this does sound like a good way to do it. Now I need to find a way to set this up.

    Once again thank you for the info.
  4. topdog

    topdog Active Member

    All you need is to setup squid on the server in question. then give them an ssh login and show them how to port forward and (setup a proxy in the browser of their choice)

    I am guessing they will be using windows so they will need putty and here is a tutorial on port forwarding with putty.

    On linux it is quite easy all you need is this
    ssh -L 3128:localhost:3128 <hostname>
  5. edge

    edge Active Member Moderator

    Again thank you for this info.
    I'll keep you posted on how I get on, and the medals they win :)
  6. edge

    edge Active Member Moderator

    Okay.. Got it all working nice, but did not manage to use it with Putty for some reason.
    The Windows XP user is now using "Plink" to create the SSH connection.
    Plink is from the same creator as Putty.
  7. falko

    falko Super Moderator ISPConfig Developer

    Do you think you could make a tutorial out of this? This sounds very interesting... :)
  8. edge

    edge Active Member Moderator

    I'll see if I can do it this weekend.
    I've also got Putty to work now.

Share This Page