Conversation

Notices

1. Embed this notice
   Matt Gray (mattgrayyes@chaos.social)'s status on Sunday, 03-Dec-2023 10:04:32 JST Matt Gray

   Putting this out there in case anyone else ends up in a similar situation.

   Have you got an IPv6-only internet connection? (Eg. thanks to a dodgy ISP or router)
   Have you got a remote server you can SSH to?

   Set up an SSH Socks proxy, and you'll be able to access the whole internet via it while you work out what's going on. Or in my case, wait until morning.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 03-Dec-2023 10:04:28 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     @mattgrayyes the -n (don't read stdin), -T (don't allocate a pseudo terminal), and -o ExitOnForwardFailure=yes options may also be useful.

     I have a hack to allow running it as a socket service under systemd if you're so inclined:

     https://github.com/ryancdotorg/libsdsock

   • Embed this notice
     Matt Gray (mattgrayyes@chaos.social)'s status on Sunday, 03-Dec-2023 10:04:30 JST Matt Gray

     in reply to

     here's the ssh command:
     ssh -D 65432 -q -C -N user@server

     Once it's logged in there'll be no output because you told it to be quiet (-q) and not do anything else (-N). -C compresses the data.

     In your computer's network interface settings or your browser's proxy settings:
     - proxy server: localhost
     - proxy port: 65432
     - Socks v5

     When your internet is fixed or when you're troubleshooting it, remember disable the proxy settings in your network interface and/or in your browser.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 03-Dec-2023 13:03:29 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • tookmund

     @tookmund @mattgrayyes 404 for that page

     -n is more relevant if you're running in the background, and I'm not sure if -T makes a difference with -N, I just habitually use it any time I'm not using a shell.

   • Embed this notice
     tookmund (tookmund@hachyderm.io)'s status on Sunday, 03-Dec-2023 13:03:31 JST tookmund

     in reply to

     • Ryan Castellucci :nonbinary_flag:

     @ryanc @mattgrayyes
     Based on some previous experimentation, neither -n nor -T are necessary when using -N.
     https://tookmund.com/2021/10/ssh-port-forward
     I didn’t know about ExitOnForwardFailure though, that’s a useful feature!

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 03-Dec-2023 13:41:32 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • tookmund

     @tookmund @mattgrayyes I guess I'm not really surprised some of the options are useless sometimes

   • Embed this notice
     tookmund (tookmund@hachyderm.io)'s status on Sunday, 03-Dec-2023 13:41:33 JST tookmund

     in reply to

     • Ryan Castellucci :nonbinary_flag:

     @ryanc @mattgrayyes
     Whoops thanks, the link should be fixed now.