SSH Tunneling Explained

🎵Teach me how to tunnel, teach me, teach me how to tunnel🎵 Ever gotten frustrated because your school or your work blocks fun/entertaining sites that can help you unwind and relax therefore increasing your productivity? SSH Tunneling is a good secure way to bypass firewalls that block sites. But that's not all! Order now and we'll also toss in local and reverse port forwarding! Check out the video to figure out what the heck I'm talking about and the magic SSH Tunneling has to offer!
_____________________________
📲🔗🔗📲 IMPORTANT LINKS 📲🔗🔗📲
______________________
List of common TCP/IP ports - web.mit.edu/rhel-doc/4/RH-DOC...
Putty - www.putty.org/
Serveo - serveo.net
_____________________________
💰💰💰💰 SUPPORT THE SHOW 💰💰💰💰
______________________
www.tinkernut.com/donate
_____________________________
🤔💡🤔💡 SUBMIT YOUR IDEAS 🤔💡🤔💡
______________________
www.tinkernut.com/ideas
____________________________
📢📢📢📢 Follow 📢📢📢📢
____________________________
redd.it/5o3tp8
instagram.com/
/ tinkernut
/ tinkernut

[@dicktonyboy]

The simplest, very best explanation and comprehensive coverage I have seen on this subject for several decades - no ever!

[@Tinkernut]

Thanks! That really means a lot :-)

[@dicktonyboy]

My pleasure.

[@nestorwheelock1314]

This is exactly what I thought too! The ship annimation is what did it for me. Why has it taken so long for me to see that analogy used to explain ports, duh. Why have I not seen this used before?! Why didn't I think of that already?!! Awesome, definitely using it for staff training tomorrow.

[@anonymousfan9703]

​@Tinkernut Not the tunneling ELON_MUSK boaring company does 😂😂😂😂 Best line

[@donporter8432]

FANTASTIC! I live in Thailand where nobody is available to help me figure out things like this, so I do my best to learn myself by Googling to death by chasing endless rabbits down multiple deadend rabbit holes! 😵 I've been fighting locally provided routers to set up port forwarding repeatedly over the years. Crappy at best instructions available, sometimes only in Thai! NOW I see tunnelling is all I need! My GOD man, THANKS! (Donation to come!)

[@loray2k]

I love how you explain things, and the visuals that you use make it easier to understand. 👍🏻

[@michaelh7538]

That is a lot of information to absorb. Thank you, I will have to go through it in super slow-mo.

[@Synthels]

@Nobody Knows ohh we've got a smart guy here back off everyone

[@digantchandel4152]

@@Synthels you are a special one aren't you

[@Synthels]

@@digantchandel4152 he deleted the comment, can't you tell?

[@eliavv]

By far, the best explanation on ssh tunneling I've seen!

[@jppunnett]

I like this intro to tunneling. Thank you. One thing important to mention is that you are not "bypassing" the firewall--you are using a port allowed by the firewall to use a service (like RDP in the demo) the firewall blocks.

[@chaoluncai4300]

this seems so trivial to overlook but yet is very crucial to understand, props for making this clear to neophytes like me!

[@courier3567]

you just described a bypass.

[@nilpo]

Of course, if the firewall is blocking RDP, it's almost certainly also blocking SSH.

[@realhusky]

This was great! Excellent explanation. Can't believe it took me this long to find your channel!

[@xiaoyi982]

I've read a couple of posts on ths subject, I was not satisfied wth the explanations and I kept looking. This is the final destination for me. Well done.

[@emcsparkles]

Thank you! Such a great, no BS explaination.

[@VanBhardwaj]

You are the coolest person making things so simple and exciting. Wish I could see you making more videos around networking!

[@NotNazuh]

Just watched your video on port forwarding, your explanations are so easy to understand.

[@T3chBeatz]

Your videos in general are pretty "Darg-an-spectacular". Another amazing explanation! [*clapping hands*]

[@davidlee50]

Being lefthanded, it is kinda nice seeing boats and berthing explanations. thanks.

[@MirkWoot]

Awesome!, this has been great help to wrap my head around the final pieces of how this work (working with same things in school).

[@wbjehwbejjhbejdhwe965]

The better tutorial in video about SSH Tunnel and Sockets Proxy. Thank you very much!

[@georgesmith3022]

if you want to connect to your home computer from work, you have to specify an external IP address (and not internal like the did). I know you know it, but you should mention it. Also you need to enable port forwarding on your adsl router, to forward the public ip, port, to local port, local ip

[@yiannisserpico2646]

Nice explanation, sir!! Really appreciate that.

[@Gregorydaerr1971]

i may have to rewatch this because i think my question. is answered in last comments he makes.....

[@markarca6360]

Don't forget DDNS. Remember, a standard residential DSL/cable/fiber Internet connection uses a dynamic IP address (unlike SME or enterprise Internet, which always have a static IP address).

[@bunny.bunbob]

thank you. stuff like that is really confusing if youre new to a concept

[@joevrolijk]

Nice, Clear, to the point with some nerdy humor... First video i've seen from you, directly subbed... Thanks!

[@crocodiledondii]

Cool stuff! Thanks for an educational and informative presentation!

[@FlameSoulis]

This is what I do with my own server used for VR work. The administration panel is on a non-standard port and the only protection is a basic username/password. To really secure it, the port is not exposed to the internet and has no username/password requirement, meaning a local connection is needed, which is what is normally tunneled. A REALLY clever trick is to use a similar idea with say PHPMyAdmin. It has an access rule to ONLY allow the server itself to access it. This forces the entry to be from a tunneled SSH session.

[@mimikatz]

Thanks, I am doing my OSCP at the moment and everything, even the buffer overflows have been totally fine, but the abstractness of SSH port forwarding (reverse specifically) has me baffled! This video has helped

[@zahidshakeel1142]

you are a life save, God bless you, Thankyou so much

[@Chief-VR]

Thanks for the video. I literally only heard SSH and nothing about what it was. Im going to be using this.

[@WaqasKhan411]

Thank you for uploading such a good video and explanation of ssh tunnels

[@meryemeaitahmed-brahim3082]

You make it easier to understand, thank you!

[@conicbrand5931]

thank you sooo much for this, and for that in port forwarding Mr Tinkernut

[@jahc00n89]

I knew what ssh was this whole time I just never knew executing it was easy asf. U deserve my sub

[@sokpisethlalalanno]

i don't know but i really like your videos man , so clean , good job

[@mathewsjoy8464]

I have no use for any of this but defiantly good to know and widened my knowledge!

[@yeppa31]

its the best explanation of ssh tunneling. Thanks a lot!

[@kenwarren2574]

Great video. Excellent instructions. Very clear. Thanks

[@ottisseaborn]

Great stuff.. ive been wondering how to tunnel outside of a secure network. Im going to try this at work when i get a chance. Ofcourse with permission!

[@Hakeeeeeeem]

This video is beautiful and i want to cry, i love you dude, please keep your videos coming you are a true plus to humanity

[@hridayjain5888]

bruh you deserve more recognition

[@alekseikonstantinov3868]

U r the best :) Many thx. The explanation is step by step and quite easy to understand. Well done!

[@sween187]

How to get fired from work.

[@RAGHAVENDRASINGH17]

Easy , stopped going then they will send letter saying u r fired 😂

[@donzodabozo8503]

@@RAGHAVENDRASINGH17 that's literally what happened to me

[@erlandodk]

Also how to get your home system pwned.. 3389 open to the public...😳

[@shady4tv]

@starscreamm Honestly probs a lot more secure than RDP since it's made by the OpenBSD guys (Security nuts). If you have to leave ssh open to the public configure something like fail2ban and set up ssh keys instead of passwords. But a good rule of thumb is to not leave any unused ports open.

[@nestorwheelock1314]

@@shady4tv Another solution I favor is having no ports open on the host to begin with, openssh server listening only on the loopback, and the firewalled host initiating a reverse tunnel to a hardened bastion/jump server.

[@ajaykumaraluvala]

Simple explanation...working perfectly

[@atharva741]

i JUST LOVED THIS VIDEO PLEASE DO MORE NETWORK VIDEOS

[@unskeptable]

Great information to get started Thanks!

[@johnswilley6764]

I love it! And I subscribed. Best wishes Sir!

[@AntonioIdeguchi]

You can't imagine how many people asks me about how to tunnel everyday. Will share it with everybody o/

[@vladislavkaras491]

Very great info! Thanks!

[@aaronbaldwin4900]

this is a great explanation. Thanks, man

[@fuba44]

This was a great video, thank you very much!

[@bergolho]

Nice tips dude !

[@afterhours39]

Thanks for this video. It answered a number of questions I've had about SSH. I'd subscribe, but I'm already a subscriber.... :-)

[@pierrenovell7135]

brilliant explanation

[@Everthow1984]

The best explanation Ever!!!!

[@_mv7_]

Thank You So Much ❤

[@markarca6360]

Examples of protocols that use SSH tunneling: SFTP (Secure FTP; also uses port 22), and SCP (Secure Copy Protocol). Actually you can tunnel virtually any transfer protocol over SSH.

[@trail000]

Awesome representation

[@meronmeresa8583]

I'm subbing just because you were singing "teach me how to tunnel". I didn't think I would be laughing before the 1 minute mark.

[@TimeLords910]

ssh has made me intreinged i've been looking at different vids about it and your's was easier to understand

[@Amit-cc6db]

I like the way u teach ....keep on buddy

[@anonymous6666]

simple and extremely helpful. thx

[@xila8861]

wow man, this is a really great video.

[@hamid.naeemabadi]

This is GREAT. Thank You.

[@parleckius]

Very nice explaining

[@seshurao6652]

Sir that's very good . Good Explanation with good Example. I loved it

[@sagargoyal8746]

Simply Awesome

[@KowboyUSA]

This is useful information, indeed.

[@iaroslavdavydiak6439]

Just awesome👍

[@shavebunny]

Thank you sir, now I get it.

[@ramstime6846]

amazing explanation with examples and animation :-)

[@doubletoned5772]

You are a gem!

[@patrickjones9474]

Very good explanation

[@ronkierstead]

Brillant video. I was able to configure the x11 "xrdp" server installed on my Raspberrypi 4 to be accessible by my work computer over Windohs RDP client. Thank you! FWIW I found that Git-scm client for windows to be awesome as a SSH and bash client on windows.

[@samhoward8909]

Awesome explanations. I liked reversed ssh the most. When doing a reverse ash to say the work computer, will it time out or stay that way long enough for you to get home and access it?

[@attabari9156]

Very well explained...thanks

[@nikalleyne77]

Good stuff champ!

[@webtrafficking]

great, interesting and with expertise. thanks

[@dillon4321]

Great guide!

[@fazlulfazal9508]

I love you, BRO. Your video helped.

[@IllevensKO]

as soon as I saw the seaport graphics I got nostalgic, exited the video and went browsing 90s strategy games

[@ethicalhackingshell1865]

very nice explanation.

[@CarlosHasAIdea]

love your videos!!

[@Galactic.Fornex]

Thank you so much !!!!

[@josemfacuna6754]

That was great! Thanks

[@pierodicarlodallabona]

Thanks bro

[@samueltorres2485]

Your intro song is coooool! :)

[@jagataai]

Very good explanation. Just one thing I wish to ask is, if network connection is interrupted what will happen to the ssh tunnel? Whether it has feature to reestablish automatically just as normal LAN or WiFi link?

[@LaneLarson]

Great video.

[@andreasalme5731]

Great stuff

[@brandon_wallace]

Nice!

[@the_master_coder2655]

great video as always! cant believe those 10 people who disliked smh .-.

[@cokomi61]

Well Sayid, Thx

[@FF7824]

Great!!

[@karimkazia]

awesome thank you.

[@rfaikbal]

wow! You have just made me realized how vulnerable Internet is.

[@UmVtCg]

It's not actually

[@gwgux]

SSH Tunneling is great. I don't recommend doing it with a work and home PC, but if you put up your own webserver in the cloud for work or for you own personal website, it's a good way to manage it remotely and transfer files. You can also put up an SSH proxy server that only lets you connect with a certificate and key pair and then tunnel another SSH session through that proxy to the webserver that uses a different authentication method for multi-factor authentication and more than one layer of protection for it. Then you set the the webserver to only allow SSH connections in from the proxy.

[@alessandrozanzi7553]

Nice job! But I have to ask you something: In the video where you explained how to host Wordpress on the Raspberry Pi you talked about SSH Tunneling and how it is more secure than simple port-forwarding. Could you show how to make the website of that video aviable on the Internet with a top-level domain and SSH Tunneling (or in some other way without putting at risk your home network)? That would be very helpful!

[@brandonhirdler]

Alessandro Zanzi the best thing you can do is read up on how to secure your network via firewall and keep every program you have up to date with the latest patch.

[@55Ahmad1994]

Smooth explanation, thanks. But what about security? And will it triggers a flag to my work admins?

[@clemf3785]

merci !

[@joseecheverria9946]

Good video! I have one question In the remote desktop can I use the server ip address instead of localhost? I am trying using the ip address and it does not work How the client (remote desktop) knows that the localhost is the ip address configured in the SSH -L port:ipaddress ?

[@cmines73]

Could you also use SSH if there is not an issue of a port being blocked? Or would that kind of defeat the purpose.

[@ArjunDandagi]

Your certificate expired 33 days ago care to refresh or add a new letsencrypt key ? .. new subscriber to your channel .. great video about ssh tunneling

[@huycong5542]

I have a question. When you use Dynamic Tunelling to browse, is the computer browsing the web through the raspberry pi or is it by itself?

[@dmac5678]

I have a question. I bring my macbook to work from home when it’s slow, I also run a windows 10 machine at home. While at work Netflix is blocked. Is it possible to ssh tunnel to my home machine (while on my MacBook at works WiFi) and bring up a browser session from home?

[@abhisheksharma6474]

this is a pretty good explanation but it would be easier to understand if it were a bit more comprehensive in explaining which port is accessed by which device and do i need to specify a port forwarding setting on my home router...

[@VinnyMartello]

This is all very new to me so I’m enjoying being exposed to new information.

[@bai-yitzeng9901]

Nice video! I tested the SSH port forwarding and run a packet capture on SSH server's network interface (WiFi adapter on a Lenovo laptop). With port forwarding rules and firewall rules set up on both server's and client's sides routers, I was able to follow the instruction from the video (2:37) and remote into my server from my client over Microsoft Remote Desktop Connection. However, looking at the pcap file, I only found port 22 packets but no packets uses the other non-blocked port (8181 in video's example) to forward port 3389 traffics. So I blocked the port (8181) by setting a blocking outbound rule on client side's router, and Remote Desktop Connection still worked!??? So I'm wondering if port 8181 is really being used because I don't really see it in the captured packets and its' still working despite the port is blocked on client's network. Here are my network setups: 1. Server side router i. No firewall rules at all ii. Port forwarding rules: port 22 and port 3389 to the same SSH server (note I didn't even forward port 8181) 2. Client side router i. Firewall policy allows port 22 to the public IP of the server's network and blocks everything else. And here's the command I used to establish SSH tunnel: > ssh -L 8181:[servers_public_IP]:3389 [servers_login_username]@[servers_public_IP]

[@nilpo]

The port isn't actually being used. SSH is just taking packets tagged for that port and using those.

[@user-xj2kj1jv8l]

me da ganas de quitarme lentamente la existencia cada vez que veo este video ATTE Yoel Pérez Alted