It would be nice if OpenSSH would have features to circumvent network filters, like SSL tunneling

Damien Miller djm at mindrot.org
Thu Apr 20 15:38:50 AEST 2023


On Wed, 19 Apr 2023, Yuri wrote:

> I am in the network that is behind the Zscaler firewall.
> 
> Virtually all ports except 80 and 443 are closed. ssh through any of ports 80
> and 443 is disallowed based on protocol content analysis.
> 
> 
> It would be nice if OpenSSH would have some features that would allow the user
> to break out of such network.

You can do everything you need with a ProxyCommand. A good reason *not*
to put such functionality into OpenSSH itself it that firewall vendors
would add a detection for it explicitly and then you're back to square
one, and we're stuck maintaining it.

-d


More information about the openssh-unix-dev mailing list