<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body >To add to eriks socks proxy comments, firefox and perhaps other browsers can also tunnel its DNS queries through the socks proxy as well for added privacy. <br><br><br>-------- Original message --------<br>From: Erik Anderson <erikerik@gmail.com> <br>Date: <br>To: TCLUG Mailing List <tclug-list@mn-linux.org> <br>Subject: Re: [tclug-list] vnc/rdesktop <br> <br><br>On Sun, Dec 2, 2012 at 8:09 PM, Brian Wood <woodbrian77@gmail.com> wrote:<br>> Does anyone know of examples of on line services that use<br>> tunneling? I've not found much.<br><br>No, but I suspect that's due to the fact that learning the few<br>command-line flags for tunneling is a bit higher learning curve than<br>most people are willing to put up with. That said, ssh tunnelling is<br>*immensely* useful for day-to-day development/sysadmin type<br>activities.<br><br>I use it exclusively to connect to our EC2 cluster, in lieu of a<br>full-fledged VPN. It's fast, simple, reliable, and doesn't require any<br>additional configuration on the server side of things.<br><br>As an example of how I use ssh tunneling on a near-daily basis: Sequel<br>Pro, a MySQL client for OSX, supports accessing the remote DB over an<br>ssh tunnel. So all you need to do is give Sequel Pro the ssh server<br>name, your username, and db credentials and Bob's your uncle. Instant<br>secure, remote database access.<br><br>Oh, I did think of one very popular service that leverages ssh<br>tunnelling - github. When pushing commits to any repository on github,<br>you're tunnelling git over ssh.<br><br>-Erik<br>P.S. I know this has been discussed on the list before, but it's<br>useful enough to bear repeating: One more frequent use case is giving<br>yourself a secure SOCKS-compatible proxy. This is very useful on<br>public, untrusted networks to allow you to tunnel all of your browsing<br>traffic through a secure tunnel. Assuming you have a linux server<br>somewhere at your disposal, just run:<br><br>$ ssh user@host -D8000<br><br>That will set up a dynamic (SOCKS) proxy on your localhost port 8000.<br>Then in your browser settings, just configure it to use localhost:8000<br>as a proxy.<br>_______________________________________________<br>TCLUG Mailing List - Minneapolis/St. Paul, Minnesota<br>tclug-list@mn-linux.org<br>http://mailman.mn-linux.org/mailman/listinfo/tclug-list<br></body>