ssh tunneling question (sort of)
A friend of mine sent me an email asking me a question, and i wasn't sure of the answer, so I am bringing it to you guys.
Quote:
So I setup dyndns, squid and sshd on a pc at home, and am able to tunnel my web traffic through ssh. I did some packet sniffing on my laptop, the traffic is encrypted, but I'm still able to see the source, destination IPs and the ports they're using..Is there any way around this?
I am almost positive that you can't block seeing where the packets are going/comming from. Am I wrong? I know the reason has to do with troubleshooting and security issues but I was wondering if you guys could explain further on the subject.
Re: ssh tunneling question (sort of)
Quote:
I am almost positive that you can't block seeing where the packets are going/comming from. Am I wrong? I know the reason has to do with troubleshooting and security issues but I was wondering if you guys could explain further on the subject. [/B]
No, you are right. You cant hide ip/port from the the tunnels' ends. If the guy are using his own machine for tunnel start, all packets will depart from his machine (and with his ip).
The only way to hide source ip/port is using another machine and tunnel the traffic thru that.