Firewall Wizards: Re: SSH question

[Michael Lerperger <mlerp () whoi edu>]

Another, much cleaner way is, of course, to compile ssh with SOCKS
support. Most firewall products will support that, too. One advantage is
that, if configured right on your client, you can transparently use ssh
both to machines inside and outside yor firewalled LAN.

-Michael

> Adam Shostack wrote:
> > And SSH can be tunneled via most companies' SSL
> > 'proxies.'
> Exactly, and that's because most "SSL" proxies know nothing about
> the SSL protocol; they just use the HTTP CONNECT extension method
> to build an HTTP-based circuit gateway, or use some other circuit
> mechanism (e.g., Raptor's older httpd doing transparent relaying
> on 443/tcp).