Re: shell access behind a trasparent proxy http only

[Boris Pavlov <edi@elib.minfin.bg>]

lemme ask you: 1) user 2) proxy 3) target sshd?
if so:

a) can you access the proxy directly as proxy server pointing address 
and port?

b)ask (or try, see below) if it supports CONNECT. usually, if you can 
make httpS - yes;

c)if yes - on which ports.

and:
bind sshd at the target on this port (for example 443); just make sure 
the port is unused, and add another line with another one Port command, 
like this:
---
# What ports, IPs and protocols we listen for
Port 22
Port 443
---
reload or restart sshd and :
netstat -lnp|grep sshd
tcp        0      0 0.0.0.0:22              0.0.0.0:* 
LISTEN      14379/sshd
tcp        0      0 0.0.0.0:443            0.0.0.0:* 
LISTEN      14379/sshd


use client which supports this (putty for example)

edi
PS tested, works with plain proxy (squid) and putty.
PS/2 sorry for the yelling, but: IT IS MANAGEMENT PROBLEM. don't try too 
hard to solve management problems with technical solutions. if you 
succeed, it may become nasty management's habit. sorry for the poor english.