Comments on: Can I SSH with T-Mobile Hotspot in hotel?

Question: Can I SSH with T-Mobile Hotspot in hotel?

xorry — Tue, 11 Dec 2007 19:50:32 -0800

The hotel I'm at uses T-Mobile HotSpot (or whatever..) for the wifi. It seems to work fine for web browsing, but I can't seem to use any ssh clients to connect to work and get any real work done. I've seen that others have also had problems with this. As far as I can tell it's just an issue of outgoing port blocking, and (from previous questions) there's nothing much to be done. I've called hotel support but it is just T-Mobile support, and moronic. I really don't feel like dealing with people. Am I just out of luck?

Apologies if this isn't the most lucid of questions. It's been a long week.

It's a Windows machine. I just got the laptop today and haven't been able to try any other OSs on it.

By: xorry

xorry — Tue, 11 Dec 2007 19:56:55 -0800

Erk, I did some more digging and it looks like a no:

http://ask.metafilter.com/74097/Help-me-telnet#1102707

I think I'll have to try to put together a web tunneling app while I'm at the office tomorrow.

If anyone still has anything to add, feel free. I'm heading off to ZZ land.

By: bottlebrushtree

bottlebrushtree — Tue, 11 Dec 2007 20:17:18 -0800

Can you VPN in to someplace and then SSH out of there?

By: procrastination

procrastination — Tue, 11 Dec 2007 20:21:50 -0800

Maybe if you have your own server, run sshd on port 80 or 443?

By: Kadin2048

Kadin2048 — Tue, 11 Dec 2007 20:27:59 -0800

Here are instructions on how to do it. The key piece of software is called "corkscrew". In order to use it on Windows, you need to install Cygwin, because it's written for Unix. It allows you to set up an SSH session through an HTTP proxy without installing any endpoint software on a remote machine.

There are lots of other ways to set up a SSH connection inside a HTTP(S) one, but that involve installing software onto a web server somewhere to act as the endpoint. Corkscrew doesn't. I have no idea exactly how it does what it does -- it strikes me as a little bit of black magic.

However you will need to get an address for an open HTTP proxy, either one run by the hotspot (best), or just some random one out there on the internet (less ideal). You still need some point at which to terminate and strip off the HTTP tunnel...corkscrew just lets it be any old proxy, instead of a server with special software on it.

By: cdmwebs

cdmwebs — Tue, 11 Dec 2007 20:45:41 -0800

You can't just tunnel out through port 80 like this?

ssh -L 80:localhost:22 www.my-domain.com

By: hattifattener

hattifattener — Tue, 11 Dec 2007 21:47:13 -0800

Kadin2048: Looks like it uses the HTTP CONNECT command, which is intended for proxying https connections — but it does that by providing a transparent connection you can run any protocol over.

By: smackfu

smackfu — Tue, 11 Dec 2007 22:06:09 -0800

it strikes me as a little bit of black magic

I read through the code (ugh, portable C), and it looks like it does an HTTP CONNECT to the proxy web server, and then tells it to connect to the SSH host directly, w/ the SSH port (22). This feature is intended for using HTTPS (port 443) over HTTP (port 80) proxies, but people abuse it.

Hey, it even has a vulnerability warning for it.

Multiple vendors' HTTP proxy services use insecure default configurations that could allow an attacker to make arbitrary TCP connections to internal hosts or to external third-party hosts.

By: xorry

xorry — Wed, 12 Dec 2007 04:50:26 -0800

Thanks guys! I'll try some of these out tonight. I'm wary that the VPN will be blocked but it's a great idea.

By: zengargoyle

zengargoyle — Wed, 12 Dec 2007 10:51:24 -0800

2nding corkscrew... I'm not sure of Windows compatabily, and I'm not sure I remember exactly how it works, but the last time I found myself without SSH it was corkscrew and happy SSH-ing the next day.

By: arnoooooo

arnoooooo — Thu, 13 Dec 2007 02:37:48 -0800

if you can do that, you might want to install AjaxTerm, which is a web based SSH : http://anthony.lesuisse.com/qweb/trac/wiki/AjaxTerm