{"id":1116,"date":"2016-03-02T13:17:02","date_gmt":"2016-03-02T04:17:02","guid":{"rendered":"https:\/\/happypanter.wordpress.com\/?p=1115"},"modified":"2016-03-02T13:17:02","modified_gmt":"2016-03-02T04:17:02","slug":"debian%e3%81%a7proxytunnel","status":"publish","type":"post","link":"http:\/\/hireido.blogsite.org\/wptiger\/archives\/1116","title":{"rendered":"debian\u3067proxytunnel"},"content":{"rendered":"

\u4ee5\u524dCentOS\u3067\u306eproxytunnel\u4f7f\u3044\u65b9<\/a>\u3092\u66f8\u3044\u305f\u304c\uff0c\u4eca\u56de\u306fdebian\u4e0a\u306eapache\u306bproxytunnel\u53d7\u4fe1\u3092\u6e96\u5099\u3057\u305f\uff0eCentOS\u3068\u306f\u3044\u308d\u3044\u308d\u9055\u3063\u3066\u3044\u308b\uff0e<\/p>\n

\/etc\/apache2\/site-enabled\/000-default-ssl\u3092\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u7de8\u96c6<\/p>\n

\n

 <\/p>\n

 <\/p>\n

<IfModule mod_ssl.c><\/p>\n

# for proxytunnel<\/p>\n

<VirtualHost *:443><\/p>\n

ServerName hoge.hoge.net:443
\nDocumentRoot “\/var\/www”
\nServerAdmin watashi@localhost<\/p>\n

SSLCertificateFile \/etc\/ssl\/certs\/ssl-cert-snakeoil.pem
\nSSLCertificateKeyFile \/etc\/ssl\/private\/ssl-cert-snakeoil.key<\/p>\n

## Only ever allow incoming HTTP CONNECT requests.
\n## Explicitly deny other request types like GET, POST, etc.
\n## This tells Apache to return a 403 Forbidden if this virtual
\n## host receives anything other than an HTTP CONNECT.
\nRewriteEngine On
\nRewriteCond %{REQUEST_METHOD} !^CONNECT [NC]
\nRewriteRule ^\/(.*)$ – [F,L]<\/p>\n

## Setup proxying between youwebserver:8443 and yoursshserver:22<\/p>\n

ProxyRequests On
\nProxyBadHeader Ignore
\nProxyVia Full<\/p>\n

## IMPORTANT: The AllowCONNECT directive specifies a list
\n## of port numbers to which the proxy CONNECT method may
\n## connect. For security, only allow CONNECT requests
\n## bound for port 22.
\nAllowCONNECT 22<\/p>\n

## IMPORTANT: By default, deny everyone. If you don’t do this
\n## others will be able to connect to port 22 on any host.
\n<Proxy *>
\nOrder deny,allow
\nDeny from all
\n<\/Proxy>
\n## Now, only allow CONNECT requests bound for kolich.com
\n## Should be replaced with yoursshserver.com or the hostname
\n## of whatever SSH server you’re trying to connect to. Note
\n## that ProxyMatch takes a regular expression, so you can do
\n## things like (kolich.com|anothersshserver.com) if you want
\n## to allow connections to multiple destinations.
\n<ProxyMatch (hoge.hoge.net|hoka.hoka.jp|192.168.xx.1)>
\nOrder allow,deny
\nAllow from all
\n<\/ProxyMatch><\/p>\n

## Logging, always a good idea.
\nLogLevel warn
\nErrorLog \/var\/log\/apache2\/tun-proxy_error_log
\nCustomLog \/var\/log\/apache2\/tun-proxy_request_log combined<\/p>\n

<\/VirtualHost>
\n<\/IfModule><\/p>\n

\n

 <\/p>\n

\/etc\/apache2\/mods-enabled\u306b\u4ee5\u4e0b\u306e\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\u3092\u4f5c\u6210<\/p>\n

proxy.conf
\nproxy.load
\nproxy_connect.load
\nProxy_http.load
\nrewrite.load<\/p>\n

 <\/p>\n

\u3053\u308c\u3067CentOS\u3068\u540c\u3058\u3088\u3046\u306bproxytunnel\u304c\u4f7f\u3048\u308b\u3088\u3046\u306b\u306a\u308b\uff0e\u3082\u3057\u304b\u3057\u305f\u3089\uff0c\u4e0d\u8981\u306a\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u6307\u5b9a\u3057\u3066\u3044\u308b\u304b\u3082\u3057\u308c\u306a\u3044\u304c\uff0c\u305d\u308c\u306f\u52d8\u5f01\u3057\u3066\u307b\u3057\u3044\uff0eapache\u306b\u8a73\u3057\u3044\u8a33\u3058\u3083\u3042\u306a\u3044\u306e\u3067\uff0e<\/p>\n","protected":false},"excerpt":{"rendered":"

\u4ee5\u524dCentOS\u3067\u306eproxytunnel\u4f7f\u3044\u65b9\u3092\u66f8\u3044\u305f\u304c\uff0c\u4eca\u56de\u306fdebian\u4e0a\u306eapache\u306bproxytunnel\u53d7\u4fe1\u3092\u6e96\u5099\u3057\u305f\uff0eCentOS\u3068\u306f\u3044\u308d\u3044\u308d\u9055\u3063\u3066\u3044\u308b\uff0e \/etc\/apache2\/site-enabled\/000-default-ssl\u3092\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u7de8\u96c6 &nb […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[15],"_links":{"self":[{"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/posts\/1116"}],"collection":[{"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/comments?post=1116"}],"version-history":[{"count":0,"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/posts\/1116\/revisions"}],"wp:attachment":[{"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/media?parent=1116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/categories?post=1116"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/tags?post=1116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}