1.5.3


Old Stuff

 www.your-freedom.net
 www.secure-tunnel.com

Ticket #121 (closed defect: fixed)

Opened 2 years ago

Last modified 2 years ago

Failed access behind SOCKS firewall

Reported by: jono_dale@yahoo.com Assigned to: andrei
Priority: normal Milestone: AlmostVPN 0.9.11
Component: FAQ Version: 0.9
Severity: blocker Keywords: proxy
Cc:

Description (Last modified by andrei)

Hi,

You might remember me - I sent you some email ages ago about getting Almost VPN working through our corporate SOCKS firewall. Well, I have been using AlmostVPN quite successfully until about version 0.9.7 (I can't quite remember which version broke it), but now, whenever I try to connect using Almost VPN, I get a failed connection error.

In my configuration, I have a .ssh/config file which looks like this:

Host www.blazingcactus.com
  ProxyCommand /Users/jdale/bin/connect -S sproxy.fnanic.fujitsu.com:1080 %h %p

'connect' is a small program that fudges the communication to the named SOCK server on the specific port.

I can connect to my remote machine correctly from behind our corporate firewall (because it is using .ssh/config which tells it to use the connect program with our SOCKS firewall) when I try the following ssh command from a Terminal:

ssh myusername@www.blazingcactus.com

And, if I use the -L commands, then I can set up the appropriate SSH tunnels (mainly for retieving Yahoo and .mac mail).

However, when I setup a session in AlmostVPN and enter my username, hostname and password, it fails with an immediate 'Connection Refused' error (I'm using the 'Test Account' button) - the log reports:

01/25/06 17:17:30[14194] startSession : jdale@www.blazingcactus.com : 
01/25/06 17:17:30[14194] PID  ( jdale@www.blazingcactus.com ) is dead
01/25/06 17:17:30[14194] ssh: connect to host 71.132.22.148 port 22: Connection refused

doSSH:2:connection refused
01/25/06 17:17:30[14194] stopSession : jdale@www.blazingcactus.com : kill 

This looks like Almost VPN is not using my .ssh/config command when executing the ssh command - why would this be? I remember in a previous email communication, you mentioned something about SSH config files and the root users, but I can't remember.

Thanks for you help and for a great product. Please let me know if you need any more information.

Best wishes,

Jonathan Dale

Change History

01/25/06 22:41:33 changed by andrei

  • keywords set to proxy.
  • status changed from new to assigned.
  • description changed.
  • milestone set to AlmostVPN 0.9.10.

Jonathan, could you please either e-mail to support@leapingbytes.com or attach to this ticket following file:

~/Library/Application Support/AlmostVPN/almostvpn.log

You might want to make sure that "extra logging" is on ( Wiki : How Can I See AlmostVPN Logs ).

O.T. Will you care if future versions of AlmostVPN will stop support SSH v1?

01/26/06 17:03:10 changed by andrei

Jonathan, I think it is Host name vs. IP address issue. As of 0.9.7 AlmostVPN start to use IP address on SSH command (regardless of what you have entered in Account definition). Try to create another "Host" record for IP address (71.131.206.32) and see if it will work.

01/31/06 12:17:21 changed by andrei

  • status changed from assigned to closed.
  • resolution set to fixed.

As of 0.9.11 AlmostVPN incorporates "connect" utility which allows to connect to SSH servers via HTTP or SOCKS proxies.