Home page logo
/

basics logo Security Basics mailing list archives

Re: Tunnel DNS queries
From: "Huzeyfe ONAL(Gmail)" <huzeyfe.onal () gmail com>
Date: Thu, 17 Apr 2008 20:30:41 +0300

Hi,

you can tunnel your udp connections( of course  your dns queries too)
through an ssh connection using netcat and OpensSSH [1]

And if your application supports socks(socks5 supports udp) proxying
then you can use OpenSSH's SOCKS proxy forwarding feaure (-D ).




[1]http://zarb.org/%7Egc/html/udp-in-ssh-tunneling.html




On Thu, Apr 17, 2008 at 6:31 AM, secrookie () gmail com
<secrookie () gmail com> wrote:

I am researching on how to tunnel udp DNS queries.

There are lots of information on how to do this for secure web
browsing (ssh/squid, enable remote dns proxy in config: firefox
etc..).

I would like to tunnel all DNS queries from a Linux box via ssh to a
remote DNS server.  I looked into port forwarding 53 but was not
sucessfull.  As DNS queries are UDP I am not sure if it will work with
openssh.  My understanding is openssh tunnel only works with TCP.

Any input would be appreciated.

regards,
secrookie




-- 
Huzeyfe ONAL
huzeyfe () lifeoverip net
http://www.lifeoverip.net

Ag guvenligi listesine uye oldunuz mu?
 http://netsec.lifeoverip.net

On Thu, Apr 17, 2008 at 6:31 AM, secrookie () gmail com
<secrookie () gmail com> wrote:
I am researching on how to tunnel udp DNS queries.

There are lots of information on how to do this for secure web
browsing (ssh/squid, enable remote dns proxy in config: firefox
etc..).

I would like to tunnel all DNS queries from a Linux box via ssh to a
remote DNS server.  I looked into port forwarding 53 but was not
sucessfull.  As DNS queries are UDP I am not sure if it will work with
openssh.  My understanding is openssh tunnel only works with TCP.

Any input would be appreciated.

regards,
secrookie




-- 
Huzeyfe ONAL
huzeyfe () lifeoverip net
http://www.lifeoverip.net

Ag guvenligi listesine uye oldunuz mu?
http://netsec.lifeoverip.net
---


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]