Ttyjfyk

What is the purpose of a disclaimer like "this is not legal advice"?

Can the Witch Sight warlock invocation see through the Mirror Image spell?

Will expression retain the same definition if particle is changed?

Short scifi story where reproductive organs are converted to produce "materials", pregnant protagonist is "found fit" to be a mother

Why do we say 'Pairwise Disjoint', rather than 'Disjoint'?

Under what conditions can the right to remain silent be revoked in the USA?

What is the oldest European royal house?

Do black holes violate the conservation of mass?

What does *dead* mean in *What do you mean, dead?*?

How do spaceships determine each other's mass in space?

Has a sovereign Communist government ever run, and conceded loss, on a fair election?

What is Tony Stark injecting into himself in Iron Man 3?

Cycles on the torus

Logistic regression BIC: what's the right N?

What does the Digital Threat scope actually do?

Is there a math expression equivalent to the conditional ternary operator?

Is "cogitate" used appropriately in "I cogitate that success relies on hard work"?

What should I do when a paper is published similar to my PhD thesis without citation?

The (Easy) Road to Code

How to copy the rest of lines of a file to another file

Is divide-by-zero a security vulnerability?

I reported the illegal activity of my boss to his boss. My boss found out. Now I am being punished. What should I do?

How do I increase the number of TTY consoles?

Is there a logarithm base for which the logarithm becomes an identity function?

Access to the internet from a firewalled server

iptables rule for local network with free internet blocking unrequested connection from internet to server?Preventing program from using internetHow can I protect my computer when the only way to access the internet is though a compromised internet connection?Transparent proxying of TCP connections on port (mostly, without root access)How can I redirect internet traffic from local to proxy server with ip tables (DEBIAN 6)Block Internet access, but not network access for a userDebian Jessie server has no internet accessWhat are the most restrictive external firewall / DNS listening port settings I can have for my DNS server (internal clients only)Using an internet hosted server as a proxy serverWhy I cannot access the svn server from remote?

1

I'm trying to set up a test Docker platform at work. I need pull images, but can't do so because the test server does not have direct internet access (firewalled). There is another server that can connect to the internet, but only through a proxy. Between the test server and internet-accessible server, only a handful of ports are open. I'm thinking I could set up a tunnel between both, but not sure how.

Ports open from Test server to Internet-accessible:

80/tcp
111/tcp
2049/tcp
7001/tcp
7002/tcp

Ports open from Internet-accessible to Test:

22/tcp
1720/tcp

I have http_proxy configured in .bash_profile, on the Internet-accessible server:

export http_proxy=http://username:password@internet-server:8080/

linux firewall proxy

share|improve this question

edited 41 mins ago

Rui F Ribeiro

41.3k1481140

asked Apr 14 '16 at 21:37

DaveDave

219

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  What use is that http_proxy definition if port 8080 isn't accessible? Or is that the point of the question? Or is that proxy actually a third server that you haven't mentioned?
  
  – roaima
  Apr 14 '16 at 22:38
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  The internet-accessible server uses an authenticated proxy on port 8080. If I need to get anything from the web (eg wget) on that host, I have to use the proxy.
  
  – Dave
  Apr 14 '16 at 23:58
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Just so that I'm clear; I want to be able to use wget/curl to fetch packages on the test server, through the internet-accessible server.
  
  – Dave
  Apr 15 '16 at 0:01
  
  

  
  
  
  

add a comment | 

1

I'm trying to set up a test Docker platform at work. I need pull images, but can't do so because the test server does not have direct internet access (firewalled). There is another server that can connect to the internet, but only through a proxy. Between the test server and internet-accessible server, only a handful of ports are open. I'm thinking I could set up a tunnel between both, but not sure how.

Ports open from Test server to Internet-accessible:

80/tcp
111/tcp
2049/tcp
7001/tcp
7002/tcp

Ports open from Internet-accessible to Test:

22/tcp
1720/tcp

I have http_proxy configured in .bash_profile, on the Internet-accessible server:

export http_proxy=http://username:password@internet-server:8080/

linux firewall proxy

share|improve this question

edited 41 mins ago

Rui F Ribeiro

41.3k1481140

asked Apr 14 '16 at 21:37

DaveDave

219

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  What use is that http_proxy definition if port 8080 isn't accessible? Or is that the point of the question? Or is that proxy actually a third server that you haven't mentioned?
  
  – roaima
  Apr 14 '16 at 22:38
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  The internet-accessible server uses an authenticated proxy on port 8080. If I need to get anything from the web (eg wget) on that host, I have to use the proxy.
  
  – Dave
  Apr 14 '16 at 23:58
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Just so that I'm clear; I want to be able to use wget/curl to fetch packages on the test server, through the internet-accessible server.
  
  – Dave
  Apr 15 '16 at 0:01
  
  

  
  
  
  

add a comment | 

I'm trying to set up a test Docker platform at work. I need pull images, but can't do so because the test server does not have direct internet access (firewalled). There is another server that can connect to the internet, but only through a proxy. Between the test server and internet-accessible server, only a handful of ports are open. I'm thinking I could set up a tunnel between both, but not sure how.

Ports open from Test server to Internet-accessible:

80/tcp
111/tcp
2049/tcp
7001/tcp
7002/tcp

Ports open from Internet-accessible to Test:

22/tcp
1720/tcp

I have http_proxy configured in .bash_profile, on the Internet-accessible server:

export http_proxy=http://username:password@internet-server:8080/

linux firewall proxy

share|improve this question

edited 41 mins ago

Rui F Ribeiro

41.3k1481140

asked Apr 14 '16 at 21:37

DaveDave

219

80/tcp
111/tcp
2049/tcp
7001/tcp
7002/tcp

22/tcp
1720/tcp

export http_proxy=http://username:password@internet-server:8080/

share|improve this question

edited 41 mins ago

Rui F Ribeiro

41.3k1481140

asked Apr 14 '16 at 21:37

DaveDave

219

share|improve this question

edited 41 mins ago

Rui F Ribeiro

41.3k1481140

asked Apr 14 '16 at 21:37

DaveDave

219

edited 41 mins ago

Rui F Ribeiro

41.3k1481140

edited 41 mins ago

Rui F Ribeiro

41.3k1481140

asked Apr 14 '16 at 21:37

DaveDave

219

asked Apr 14 '16 at 21:37

DaveDave

219

2 Answers
2

active

oldest

votes

1

You could set up a ssh-based virtual private network using the tun network pseudo-device; man ssh gives an example. If you don't have admin access on the internet-accessible server you might consider sshuttle to accomplish the same thing.

share|improve this answer

answered Apr 15 '16 at 0:29

neofugneofug

1413

add a comment | 

1

I got this working.

From the server which has internet-access:

ssh -R any-port:proxy-ip:proxy-port user@testserver

Then, once I'm on the test server:

export http_prox=http://username:password@localhost:any-port/

eg:

ssh -R 2001:proxy-ip:8080 root@testserver

[root@testserver]# export http_proxy=http://proxyuser:proxyuser-password@localhost:2001/
[root@testserver]# export https_proxy=https://proxyuser:proxyuser-password@localhost:2001/

share|improve this answer

answered Apr 19 '16 at 2:40

DaveDave

219

add a comment | 

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f276567%2faccess-to-the-internet-from-a-firewalled-server%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

1

You could set up a ssh-based virtual private network using the tun network pseudo-device; man ssh gives an example. If you don't have admin access on the internet-accessible server you might consider sshuttle to accomplish the same thing.

share|improve this answer

answered Apr 15 '16 at 0:29

neofugneofug

1413

add a comment | 

1

You could set up a ssh-based virtual private network using the tun network pseudo-device; man ssh gives an example. If you don't have admin access on the internet-accessible server you might consider sshuttle to accomplish the same thing.

share|improve this answer

answered Apr 15 '16 at 0:29

neofugneofug

1413

add a comment | 

You could set up a ssh-based virtual private network using the tun network pseudo-device; man ssh gives an example. If you don't have admin access on the internet-accessible server you might consider sshuttle to accomplish the same thing.

share|improve this answer

answered Apr 15 '16 at 0:29

neofugneofug

1413

share|improve this answer

answered Apr 15 '16 at 0:29

neofugneofug

1413

answered Apr 15 '16 at 0:29

neofugneofug

1413

answered Apr 15 '16 at 0:29

neofugneofug

1413

1

I got this working.

From the server which has internet-access:

ssh -R any-port:proxy-ip:proxy-port user@testserver

Then, once I'm on the test server:

export http_prox=http://username:password@localhost:any-port/

eg:

ssh -R 2001:proxy-ip:8080 root@testserver

[root@testserver]# export http_proxy=http://proxyuser:proxyuser-password@localhost:2001/
[root@testserver]# export https_proxy=https://proxyuser:proxyuser-password@localhost:2001/

share|improve this answer

answered Apr 19 '16 at 2:40

DaveDave

219

add a comment | 

1

I got this working.

From the server which has internet-access:

ssh -R any-port:proxy-ip:proxy-port user@testserver

Then, once I'm on the test server:

export http_prox=http://username:password@localhost:any-port/

eg:

ssh -R 2001:proxy-ip:8080 root@testserver

[root@testserver]# export http_proxy=http://proxyuser:proxyuser-password@localhost:2001/
[root@testserver]# export https_proxy=https://proxyuser:proxyuser-password@localhost:2001/

share|improve this answer

answered Apr 19 '16 at 2:40

DaveDave

219

add a comment | 

I got this working.

From the server which has internet-access:

ssh -R any-port:proxy-ip:proxy-port user@testserver

Then, once I'm on the test server:

export http_prox=http://username:password@localhost:any-port/

eg:

ssh -R 2001:proxy-ip:8080 root@testserver

[root@testserver]# export http_proxy=http://proxyuser:proxyuser-password@localhost:2001/
[root@testserver]# export https_proxy=https://proxyuser:proxyuser-password@localhost:2001/

share|improve this answer

answered Apr 19 '16 at 2:40

DaveDave

219

ssh -R any-port:proxy-ip:proxy-port user@testserver

export http_prox=http://username:password@localhost:any-port/

ssh -R 2001:proxy-ip:8080 root@testserver

[root@testserver]# export http_proxy=http://proxyuser:proxyuser-password@localhost:2001/
[root@testserver]# export https_proxy=https://proxyuser:proxyuser-password@localhost:2001/

share|improve this answer

answered Apr 19 '16 at 2:40

DaveDave

219

answered Apr 19 '16 at 2:40

DaveDave

219

answered Apr 19 '16 at 2:40

DaveDave

219