{"id":532,"date":"2014-07-30T09:51:55","date_gmt":"2014-07-30T00:51:55","guid":{"rendered":"http:\/\/happypanter.wordpress.com\/?p=532"},"modified":"2014-07-30T09:51:55","modified_gmt":"2014-07-30T00:51:55","slug":"proxytunnel%e4%bd%bf%e3%81%84%e6%96%b9","status":"publish","type":"post","link":"http:\/\/hireido.blogsite.org\/wptiger\/archives\/532","title":{"rendered":"proxytunnel\u4f7f\u3044\u65b9"},"content":{"rendered":"<p>proxytunnel\u306e\u4f7f\u3044\u65b9\u3092\u30e1\u30e2<\/p>\n<p>\u4ee5\u4e0b\u3092\u53c2\u8003\u306b\u3057\u305f\uff0e<\/p>\n<p>http:\/\/mark.koli.ch\/configuring-apache-to-support-ssh-through-an-http-web-proxy-with-proxytunnel<\/p>\n<p>[\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u5074]<\/p>\n<ol>\n<li>proxytunnel-1.9.0\u3092\u89e3\u51cd<\/li>\n<li>make<\/li>\n<li>make install<\/li>\n<li>vi ~\/.ssh\/config<\/li>\n<\/ol>\n<p style=\"padding-left:30px;\">Host myserver<\/p>\n<p style=\"padding-left:30px;\">Hostname myserver.net<\/p>\n<p style=\"padding-left:30px;\">ProxyCommand \/usr\/local\/bin\/proxytunnel -p koetai.proxy.net:port -r myserver.net:443 -d 192.168.xx.xx:22 -H &#8220;User-Agent: Mozilla\/4.0 (compatible; MSIE 6.0; Win32)&#8221;<\/p>\n<p>[\u30b5\u30fc\u30d0\u30fc\u5074]<\/p>\n<ol>\n<li>vi httpd.conf<\/li>\n<\/ol>\n<pre class=\"prettyprint prettyprinted\" style=\"padding-left:30px;\"><code><span class=\"com\">## Load the required modules.<\/span>\n<span class=\"typ\">LoadModule<\/span><span class=\"pln\"> proxy_http_module modules<\/span><span class=\"pun\">\/<\/span><span class=\"pln\">mod_proxy_http<\/span><span class=\"pun\">.<\/span><span class=\"pln\">so\n<\/span><span class=\"typ\">LoadModule<\/span><span class=\"pln\"> proxy_connect_module modules<\/span><span class=\"pun\">\/<\/span><span class=\"pln\">mod_proxy_connect<\/span><span class=\"pun\">.<\/span><span class=\"pln\">so\n<\/span>\n<span class=\"typ\">Listen<\/span> <span class=\"lit\">443<\/span>\n\n<span class=\"pun\">&lt;<\/span><span class=\"typ\">VirtualHost<\/span> <span class=\"pun\">*:<\/span><span class=\"lit\">443<\/span><span class=\"pun\">&gt;<\/span>\n\n  <span class=\"typ\">ServerName<\/span><span class=\"pln\"> myserver<\/span><span class=\"pun\">:<\/span><span class=\"lit\">443<\/span>\n  <span class=\"typ\">DocumentRoot<\/span> <span class=\"pun\">\/<\/span><span class=\"pln\">some<\/span><span class=\"pun\">\/<\/span><span class=\"pln\">path<\/span><span class=\"pun\">\/<\/span><span class=\"pln\">maybe<\/span><span class=\"pun\">\/<\/span><span class=\"kwd\">not<\/span><span class=\"pun\">\/<\/span><span class=\"pln\">required\n  <\/span><span class=\"typ\">ServerAdmin<\/span><span class=\"pln\"> admin@example<\/span><span class=\"pun\">.<\/span><span class=\"pln\">com\n\n  <\/span><span class=\"com\">## Only ever allow incoming HTTP CONNECT requests.<\/span>\n  <span class=\"com\">## Explicitly deny other request types like GET, POST, etc.<\/span>\n  <span class=\"com\">## This tells Apache to return a 403 Forbidden if this virtual<\/span>\n  <span class=\"com\">## host receives anything other than an HTTP CONNECT.<\/span>\n  <span class=\"typ\">RewriteEngine<\/span> <span class=\"typ\">On<\/span>\n  <span class=\"typ\">RewriteCond<\/span> <span class=\"pun\">%{<\/span><span class=\"pln\">REQUEST_METHOD<\/span><span class=\"pun\">}<\/span> <span class=\"pun\">!^<\/span><span class=\"pln\">CONNECT <\/span><span class=\"pun\">[<\/span><span class=\"pln\">NC<\/span><span class=\"pun\">]<\/span>\n  <span class=\"typ\">RewriteRule<\/span> <span class=\"pun\">^\/(.*)<\/span><span class=\"pln\">$ <\/span><span class=\"pun\">-<\/span> <span class=\"pun\">[<\/span><span class=\"pln\">F<\/span><span class=\"pun\">,<\/span><span class=\"pln\">L<\/span><span class=\"pun\">]<\/span>\n\n  <span class=\"com\">## Setup proxying between myserver:443 and mysshserver:22<\/span>\n\n  <span class=\"typ\">ProxyRequests<\/span> <span class=\"typ\">On<\/span>\n  <span class=\"typ\">ProxyBadHeader<\/span> <span class=\"typ\">Ignore<\/span>\n  <span class=\"typ\">ProxyVia<\/span> <span class=\"typ\">Full<\/span>\n\n  <span class=\"com\">## IMPORTANT: The AllowCONNECT directive specifies a list<\/span>\n  <span class=\"com\">## of port numbers to which the proxy CONNECT method may<\/span>\n  <span class=\"com\">## connect.  For security, only allow CONNECT requests<\/span>\n  <span class=\"com\">## bound for port 22.<\/span>\n  <span class=\"typ\">AllowCONNECT<\/span> <span class=\"lit\">22<\/span>\n\n  <span class=\"com\">## IMPORTANT: By default, deny everyone.  If you don't do this<\/span>\n  <span class=\"com\">## others will be able to connect to port 22 on any host.<\/span>\n  <span class=\"pun\">&lt;<\/span><span class=\"typ\">Proxy<\/span> <span class=\"pun\">*&gt;<\/span>\n    <span class=\"typ\">Order<\/span><span class=\"pln\"> deny<\/span><span class=\"pun\">,<\/span><span class=\"pln\">allow\n    <\/span><span class=\"typ\">Deny<\/span> <span class=\"kwd\">from<\/span><span class=\"pln\"> all\n  <\/span><span class=\"pun\">&lt;\/<\/span><span class=\"typ\">Proxy<\/span><span class=\"pun\">&gt;<\/span>\n\n<span class=\"pun\">&lt;\/<\/span><span class=\"typ\">VirtualHost<\/span><span class=\"pun\">&gt;<\/span><\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>proxytunnel\u306e\u4f7f\u3044\u65b9\u3092\u30e1\u30e2 \u4ee5\u4e0b\u3092\u53c2\u8003\u306b\u3057\u305f\uff0e http:\/\/mark.koli.ch\/configuring-apache-to-support-ssh-through-an-http-web-proxy-with-proxytunnel [\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u5074] prox [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[15],"_links":{"self":[{"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/posts\/532"}],"collection":[{"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/comments?post=532"}],"version-history":[{"count":0,"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/posts\/532\/revisions"}],"wp:attachment":[{"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/media?parent=532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/categories?post=532"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/hireido.blogsite.org\/wptiger\/wp-json\/wp\/v2\/tags?post=532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}