It would be nice if OpenSSH would have features to circumvent network filters, like SSL tunneling

Damien Miller djm at
Thu Apr 20 15:38:50 AEST 2023

On Wed, 19 Apr 2023, Yuri wrote:

> I am in the network that is behind the Zscaler firewall.
> Virtually all ports except 80 and 443 are closed. ssh through any of ports 80
> and 443 is disallowed based on protocol content analysis.
> It would be nice if OpenSSH would have some features that would allow the user
> to break out of such network.

You can do everything you need with a ProxyCommand. A good reason *not*
to put such functionality into OpenSSH itself it that firewall vendors
would add a detection for it explicitly and then you're back to square
one, and we're stuck maintaining it.


More information about the openssh-unix-dev mailing list