In this case, I will need to SSH to my office front end server first. Then I create a number of SSH tunnels to connect to the devices\/services in my work intranet. Notice that my office front end server has IP address restriction. It only allows certain IP addresses to make the connection. If I try to SSH to the server with my VPN IP address, it will be blocked. Even if I try to make the SSH connection before running the VPN software, my SSH connection will be disconnected after I turn on the VPN software. My solution is pretty simple. I route the traffic through my local Linux box. <\/p>\n
Suppose I need to connect to my office workstation. Previously, I connected to the front end server first (e.g., 123.123.123.1). I created two SSH tunnels, one for my Firefox to consume, so that I can access certain website using my office IP address, another one to access my office workstation (e.g., 10.0.0.101) via Remote Desktop. <\/p>\n
The idea is pretty simple. When I SSH to my Linux box on my local server, I create two ports in my SSH client (e.g., Putty). Here is my setup. Notice that I create two ports: 10001 and 10002. These create two ports on my Windows computer. Putty will forward the traffic to my Linux box. To keep things simple, I use the same port number, e.g., port 10001 on my Windows points to the port 10001 on my Linux box.<\/p>\n
![\"\"](\"\/wordpress\/wp-content\/uploads\/2024\/02\/Putty-02.fw_.png\")
<\/div>\n
Once I connect to my local Linux box, I run the following commands.<\/p>\n
\r\n#This will create a tunnel for the web browser to consume, i.e., browsing the website using office IP address.\r\n#10001: The port created on the Linux box.\r\n#123.123.123.1: The IP of my office front end server.\r\n#This assumes that I can SSH to my office front end server using keys (no password)\r\nnohup ssh -C -D 10001 123.123.123.1 -N > \/dev\/null &\r\n<\/pre>\n\r\n#This will create a tunnel for the Remote Desktop to consume, i.e., I can connect to my office workstation.\r\n#10002: The port created on the Linux box.\r\n#10.0.0.101: The local IP of my office workstation\r\n#3389: The port of my office workstation\r\n#123.123.123.1: The IP of my office front end server.\r\n#This assumes that I can SSH to my office front end server using keys (no password)\r\nnohup ssh -C -L 10002:10.0.0.101:3389 123.123.123.1 -N > \/dev\/null &\r\n<\/pre>\nHere is my proxy settings of my Portable Firefox<\/p>\n
![\"\"](\"\/wordpress\/wp-content\/uploads\/2024\/02\/Firefox-02.fw_.png\")
<\/div>\n
When I connect to my office workstation, I can do the following:<\/p>\n
![\"\"](\"\/wordpress\/wp-content\/uploads\/2024\/02\/Remote-Desktop-01.jpg\")
<\/div>\n
That’s it, have fun with your VPN.<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Recently I started using the Google One VPN service. I love it because of its simplicity. However, I quickly ran into problem because some services require my real IP addresses. Continue Reading →<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[6],"tags":[184],"class_list":["post-5012","post","type-post","status-publish","format-standard","hentry","category-technology","tag-vpn"],"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/p1sqzr-1iQ","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":3309,"url":"https:\/\/icesquare.com\/wordpress\/sftp-without-ssh-shell-access-2\/","url_meta":{"origin":5012,"position":0},"title":"SFTP Without SSH Shell Access","author":"Derrick","date":"October 7, 2013","format":false,"excerpt":"I got an interesting question today. Our client needs to access to the server via SFTP, but they want to disable to the access to the SSH shell. Assuming that you are fully aware of the potential issues of doing it, such ask security risk etc, here is how to\u2026","rel":"","context":"In "Computer Problems"","block_context":{"text":"Computer Problems","link":"https:\/\/icesquare.com\/wordpress\/category\/technology\/computer-problems-computer-help-pc-support\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2662,"url":"https:\/\/icesquare.com\/wordpress\/solvedfailed-to-enable-the-dataready-accept-filter\/","url_meta":{"origin":5012,"position":1},"title":"[Solved]Failed to enable the ‘dataready’ Accept Filter","author":"Derrick","date":"February 1, 2012","format":false,"excerpt":"After I updated the Apache to 2.2.22 for my FreeBSD box today, I got a problem: #apachectl stop #apachectl start [warn] (2)No such file or directory: Failed to enable the 'dataready' Accept Filter If you search for Failed to enable the 'dataready' Accept Filter on Google, you probably will find\u2026","rel":"","context":"In "Computer Problems"","block_context":{"text":"Computer Problems","link":"https:\/\/icesquare.com\/wordpress\/category\/technology\/computer-problems-computer-help-pc-support\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1780,"url":"https:\/\/icesquare.com\/wordpress\/how-to-get-hp-laserjet-1000-or-any-ancient-hp-printers-working-on-windows-7-8-64-bit\/","url_meta":{"origin":5012,"position":2},"title":"How to get HP LaserJet 1000 (or any ancient HP printers) working on Windows 7\/8 64-bit","author":"Derrick","date":"July 7, 2014","format":false,"excerpt":"I bought a HP LaserJet 1000 printer back in 2001. Still Loving it! The running cost is low and the output quality is great. It is still working great after running for 13 years! Its quality even out beats my brand new Samsung LaserJet! HP LaserJet\u00a01000 is a almost-perfect printer\u2026","rel":"","context":"In "Computer Problems"","block_context":{"text":"Computer Problems","link":"https:\/\/icesquare.com\/wordpress\/category\/technology\/computer-problems-computer-help-pc-support\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/icesquare.com\/wordpress\/wp-content\/uploads\/2013\/06\/Multifunction-printer.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":174,"url":"https:\/\/icesquare.com\/wordpress\/mount_smbfs-kldloadsmbfs-operation-not-permitted-solved\/","url_meta":{"origin":5012,"position":3},"title":"“mount_smbfs: kldload(smbfs): Operation not permitted” SOLVED!!!!","author":"Derrick","date":"July 28, 2009","format":false,"excerpt":"When I tried to mount a windows share from FreeBSD: sudo mount_smbfs -I WindowsBoxIPaddress \/\/username@WindowsBoxIPaddress\/WindowsShare \/mnt I always got this error: mount_smbfs: kldload(smbfs): Operation not permitted After searching this error message on Google, I found that all suggested solutions were related to running this command using sudo, which I already\u2026","rel":"","context":"In "FreeBSD"","block_context":{"text":"FreeBSD","link":"https:\/\/icesquare.com\/wordpress\/category\/sever-problem\/freebsd\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1438,"url":"https:\/\/icesquare.com\/wordpress\/firefox-add-ons\/","url_meta":{"origin":5012,"position":4},"title":"Add-ons for New Version of Firefox 21","author":"Derrick","date":"February 21, 2012","format":false,"excerpt":"Every time Firefox releases a major upgrade, we love it because it comes with lots of cool features. At the mean time, we hate it because lots of our favorite add-ons are not working with the new Firefox. Sometimes, the owners of the add-ons might be too busy, and it\u2026","rel":"","context":"In "Computer Problems"","block_context":{"text":"Computer Problems","link":"https:\/\/icesquare.com\/wordpress\/category\/technology\/computer-problems-computer-help-pc-support\/"},"img":{"alt_text":"","src":"\/wordpress\/wp-content\/uploads\/2011\/11\/firefox-09-intro-150x150.png","width":350,"height":200},"classes":[]},{"id":1067,"url":"https:\/\/icesquare.com\/wordpress\/package-ssh-is-not-available-but-is-referred-to-by-another-package-this-may-mean-that-the-package-is-missing-has-been-obsoleted-or-is-only-available-from-another-source\/","url_meta":{"origin":5012,"position":5},"title":"Package ssh is not available, but is referred to by another package. This may mean that the package is missing, has been obsoleted, or is only available from another source","author":"Derrick","date":"November 14, 2010","format":false,"excerpt":"Today, I helped my friend to install Debian. It was done via two GUI remote desktop connections (i.e., slow), and therefore I would like to access the server via SSH. So I tried to install the SSH package: sudo apt-get install -y ssh and I received the following message: Reading\u2026","rel":"","context":"In "Computer Problems"","block_context":{"text":"Computer Problems","link":"https:\/\/icesquare.com\/wordpress\/category\/technology\/computer-problems-computer-help-pc-support\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/icesquare.com\/wordpress\/wp-json\/wp\/v2\/posts\/5012","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icesquare.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/icesquare.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/icesquare.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/icesquare.com\/wordpress\/wp-json\/wp\/v2\/comments?post=5012"}],"version-history":[{"count":7,"href":"https:\/\/icesquare.com\/wordpress\/wp-json\/wp\/v2\/posts\/5012\/revisions"}],"predecessor-version":[{"id":5024,"href":"https:\/\/icesquare.com\/wordpress\/wp-json\/wp\/v2\/posts\/5012\/revisions\/5024"}],"wp:attachment":[{"href":"https:\/\/icesquare.com\/wordpress\/wp-json\/wp\/v2\/media?parent=5012"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/icesquare.com\/wordpress\/wp-json\/wp\/v2\/categories?post=5012"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/icesquare.com\/wordpress\/wp-json\/wp\/v2\/tags?post=5012"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"\"](\"\/wordpress\/wp-content\/uploads\/2024\/02\/Putty-01.fw_.png\")
<\/div>\n![\"\"](\"\/wordpress\/wp-content\/uploads\/2024\/02\/Firefox-01.fw_.png\")
<\/div>\n