Web based SSH

[viking60]

I finally have managed to get my no-ip address to work so my router is directing traffic directly to the box I want. So I can check that the lamp server works on port 80 via a proxy like hidemyass.com or one of the many listed on http://proxy4free.com

But how to check ssh from the "outside"?

Well there are some handy web based ssh terminals out there:

https://www.serfish.com/console/
https://webssh.uni.me/

Make sure you enter them with https or else your keystrokes can be logged.

Furthermore the server that expedites your data will do so as "man in the middle" with unencrypted data so you wil have to trust the service or change your "keystrokes" after you have finished testing.
It is important that you understand this so I will even spend a pic for further explanation:

So this is way more insecure than traditional client/server ssh interaction where your data are dead secure all the way.

But there you are with only one box and no way of testing your setup or you are on holiday and your GF/Wife has forced you to leave the laptop at home and you simply need to log into your office box.
Just go the the next library and enter one of the two addresses above and simply ssh into your box from anywhere in the world.
If you have a working dyndns/ddclient or no-ip setup (or a fixed IP of course) it will work - I have tested it.

Even if you are at home with only one box you can test it directly from there - your firewall will tell you that it comes from the outside (the SSH tunneling server).

[rolf]

bjoernvold-berserks have taught me how to ssh and fish from konqueror to my thin client web-server on the lan, tyvm.

So, there is a dynamic DNS service set up for lanlesalon.com and that can be got from anywhere. Is there no way to come in from outside on the http port and authenticate with some sort of "Hi, it's me!" to sshd? I have been thinking of migrating our domain service from domain.com to dyndns.com, the dynamic DNS provider, and maybe some subscription there would provide remote access not too expensively. It's really such a low-traffic website and I am so seldom away that this is mainly a curiosity, not so much a necessity.

[viking60]

You can generate your key on your box and send it to the salon. If you are able to open a port; 22 is default so you should probalby pick something like 222 or whatever and log in with

Code: Select all

ssh rolf@salon.dyndns.org -p 222

or something.

The generated key that has to be copied to the client is stored in ~/.ssh/id_rsa.pub.
If you do not have it on your server already, you can generate it with

Code: Select all

ssh-keygen

The key must be copied to ~/.ssh/known_hosts on the client.
It could be done automatically with something like:

Code: Select all

ssh-copy-id -i ~/.ssh/id_rsa.pub salon.dyndns.org -p 222

It might work with -p 80 too - I have never tried