{"id":87,"date":"2007-11-19T17:54:58","date_gmt":"2007-11-19T15:54:58","guid":{"rendered":"http:\/\/michauko.org\/blog\/2007\/11\/19\/openssh-et-tunnel-tcp-par-dessus-un-proxy\/"},"modified":"2011-08-26T11:17:45","modified_gmt":"2011-08-26T09:17:45","slug":"openssh-et-tunnel-tcp-par-dessus-un-proxy","status":"publish","type":"post","link":"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/","title":{"rendered":"OpenSSH et tunnel TCP par-dessus un proxy"},"content":{"rendered":"<p>Pour compl\u00e9ter <a href=\"https:\/\/michauko.org\/blog\/2009\/02\/23\/tunnels-tcp-via-ssh-putty-etc\/\">cette doc<\/a>, ax\u00e9e Windows, expliquant comment faire des tunnels SSH par dessus un proxy (du boulot) pour faire transiter un trafic TCP \u00e0 priori non autoris\u00e9, je compl\u00e8te avec le pendant pour Linux.<!--more--><\/p>\n<p>Il existe un putty pour linux. Sous Debian, c&rsquo;est une vieille version, et franchement, je n&rsquo;ai pas r\u00e9ussi \u00e0 lui faire utiliser un proxy.<br \/>\nA c\u00f4t\u00e9 de \u00e7a, la commande ssh ne sait pas nativement \u00e9tablir de connexion par dessus un proxy. Par contre elle sait donner la main \u00e0 un outil qui sait le faire. Typiquement, on trouve un programme connect.c sur Internet assez facilement. Vous pouvez le compiler et l&rsquo;utiliser. Finalement, plut\u00f4t que d&rsquo;utiliser ce programme dont je ne suis jamais s\u00fbr de l&rsquo;origine, j&rsquo;ai r\u00e9cemment trouv\u00e9 un paquet Debian appel\u00e9 \u00ab\u00a0connect-proxy\u00a0\u00bb. Il vous installe un programme <code>connect<\/code> (ou <code>connect-proxy<\/code>, je ne sais plus je fais de m\u00e9moire j&rsquo;ai jet\u00e9 ma conf et pas l&rsquo;occasion de la refaire l\u00e0).<\/p>\n<p>Ensuite, il faut configurer le fichier ~\/.ssh\/config et faire un truc dans ce go\u00fbt l\u00e0 (ou adaptez votre fichier si vous en avez d\u00e9j\u00e0 un) :<\/p>\n<pre>Host toto.com\r\n  ProxyCommand connect-proxy votre_proxy:port %h %p<\/pre>\n<p>toto.com \u00e9tant le serveur SSH ext\u00e9rieur injoignable sans passer par le proxy \u00ab\u00a0votre_proxy\u00a0\u00bb.<br \/>\nVous pourriez aussi mettre tout \u00e7a directement dans la ligne de commande ssh (via -o ProxyCommand, mais \u00e7a devient lourdingue)<\/p>\n<p>Enfin, on me souffle dans l&rsquo;oreillette que l&rsquo;outil \u00ab\u00a0corkscrew\u00a0\u00bb (paquet Debian dispo) permet cela aussi.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Pour compl\u00e9ter cette doc, ax\u00e9e Windows, expliquant comment faire des tunnels SSH par dessus un proxy (du boulot) pour faire transiter un trafic TCP \u00e0 priori non autoris\u00e9, je compl\u00e8te avec le pendant pour Linux.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[2,82],"tags":[158,27,160,79,159],"class_list":["post-87","post","type-post","status-publish","format-standard","hentry","category-debian","category-pl","tag-openssh","tag-proxy","tag-proxycommand","tag-putty","tag-tunnels"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>OpenSSH et tunnel TCP par-dessus un proxy - Le blog de Michauko<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OpenSSH et tunnel TCP par-dessus un proxy - Le blog de Michauko\" \/>\n<meta property=\"og:description\" content=\"Pour compl\u00e9ter cette doc, ax\u00e9e Windows, expliquant comment faire des tunnels SSH par dessus un proxy (du boulot) pour faire transiter un trafic TCP \u00e0 priori non autoris\u00e9, je compl\u00e8te avec le pendant pour Linux.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/\" \/>\n<meta property=\"og:site_name\" content=\"Le blog de Michauko\" \/>\n<meta property=\"article:published_time\" content=\"2007-11-19T15:54:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2011-08-26T09:17:45+00:00\" \/>\n<meta name=\"author\" content=\"michauko\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"michauko\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\\\/\"},\"author\":{\"name\":\"michauko\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#\\\/schema\\\/person\\\/0cd9f3d9ce4dccc05df81a5b27051ea9\"},\"headline\":\"OpenSSH et tunnel TCP par-dessus un proxy\",\"datePublished\":\"2007-11-19T15:54:58+00:00\",\"dateModified\":\"2011-08-26T09:17:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\\\/\"},\"wordCount\":257,\"commentCount\":0,\"keywords\":[\"OpenSSH\",\"proxy\",\"ProxyCommand\",\"putty\",\"tunnels\"],\"articleSection\":[\"Debian\",\"planet-libre.org\"],\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/michauko.org\\\/blog\\\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\\\/\",\"url\":\"https:\\\/\\\/michauko.org\\\/blog\\\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\\\/\",\"name\":\"OpenSSH et tunnel TCP par-dessus un proxy - Le blog de Michauko\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#website\"},\"datePublished\":\"2007-11-19T15:54:58+00:00\",\"dateModified\":\"2011-08-26T09:17:45+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#\\\/schema\\\/person\\\/0cd9f3d9ce4dccc05df81a5b27051ea9\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/michauko.org\\\/blog\\\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/michauko.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OpenSSH et tunnel TCP par-dessus un proxy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/michauko.org\\\/blog\\\/\",\"name\":\"Le blog de Michauko\",\"description\":\"Si tu ne comprends pas le titre de l&#039;article, passe ton chemin\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/michauko.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#\\\/schema\\\/person\\\/0cd9f3d9ce4dccc05df81a5b27051ea9\",\"name\":\"michauko\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g\",\"caption\":\"michauko\"},\"sameAs\":[\"http:\\\/\\\/michauko.org\\\/\"],\"url\":\"https:\\\/\\\/michauko.org\\\/blog\\\/author\\\/randomized2\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OpenSSH et tunnel TCP par-dessus un proxy - Le blog de Michauko","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/","og_locale":"fr_FR","og_type":"article","og_title":"OpenSSH et tunnel TCP par-dessus un proxy - Le blog de Michauko","og_description":"Pour compl\u00e9ter cette doc, ax\u00e9e Windows, expliquant comment faire des tunnels SSH par dessus un proxy (du boulot) pour faire transiter un trafic TCP \u00e0 priori non autoris\u00e9, je compl\u00e8te avec le pendant pour Linux.","og_url":"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/","og_site_name":"Le blog de Michauko","article_published_time":"2007-11-19T15:54:58+00:00","article_modified_time":"2011-08-26T09:17:45+00:00","author":"michauko","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"michauko","Dur\u00e9e de lecture estim\u00e9e":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/#article","isPartOf":{"@id":"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/"},"author":{"name":"michauko","@id":"https:\/\/michauko.org\/blog\/#\/schema\/person\/0cd9f3d9ce4dccc05df81a5b27051ea9"},"headline":"OpenSSH et tunnel TCP par-dessus un proxy","datePublished":"2007-11-19T15:54:58+00:00","dateModified":"2011-08-26T09:17:45+00:00","mainEntityOfPage":{"@id":"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/"},"wordCount":257,"commentCount":0,"keywords":["OpenSSH","proxy","ProxyCommand","putty","tunnels"],"articleSection":["Debian","planet-libre.org"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/","url":"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/","name":"OpenSSH et tunnel TCP par-dessus un proxy - Le blog de Michauko","isPartOf":{"@id":"https:\/\/michauko.org\/blog\/#website"},"datePublished":"2007-11-19T15:54:58+00:00","dateModified":"2011-08-26T09:17:45+00:00","author":{"@id":"https:\/\/michauko.org\/blog\/#\/schema\/person\/0cd9f3d9ce4dccc05df81a5b27051ea9"},"breadcrumb":{"@id":"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/michauko.org\/blog\/openssh-et-tunnel-tcp-par-dessus-un-proxy-87\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/michauko.org\/blog\/"},{"@type":"ListItem","position":2,"name":"OpenSSH et tunnel TCP par-dessus un proxy"}]},{"@type":"WebSite","@id":"https:\/\/michauko.org\/blog\/#website","url":"https:\/\/michauko.org\/blog\/","name":"Le blog de Michauko","description":"Si tu ne comprends pas le titre de l&#039;article, passe ton chemin","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/michauko.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/michauko.org\/blog\/#\/schema\/person\/0cd9f3d9ce4dccc05df81a5b27051ea9","name":"michauko","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g","caption":"michauko"},"sameAs":["http:\/\/michauko.org\/"],"url":"https:\/\/michauko.org\/blog\/author\/randomized2\/"}]}},"_links":{"self":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts\/87","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/comments?post=87"}],"version-history":[{"count":2,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts\/87\/revisions"}],"predecessor-version":[{"id":1274,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts\/87\/revisions\/1274"}],"wp:attachment":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/media?parent=87"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/categories?post=87"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/tags?post=87"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}