2
I'm having issues with SSHing through a corporate proxy.
In my Windows environment - SSH works fine:
$ ssh -v git@github.com
OpenSSH_7.5p1, OpenSSL 1.0.2k 26 Jan 2017
debug1: Reading configuration data /c/Users/davidj/.ssh/config
debug1: /c/Users/davidj/.ssh/config line 2: Applying options for github.com
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to github.com [192.30.255.112] port 22.
debug1: Connection established.
...
Now in my Windows taskbar, there's an ISA Server Firewall client. If I uncheck 'Enable Microsoft Firewall Client for ISA Server' then my SSH attempt will fail.
$ ssh -v git@github.com
OpenSSH_7.5p1, OpenSSL 1.0.2k 26 Jan 2017
debug1: Reading configuration data /c/Users/davidj/.ssh/config
debug1: /c/Users/davidj/.ssh/config line 2: Applying options for github.com
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to github.com [192.30.255.112] port 22.
debug1: connect to address 192.30.255.112 port 22: Connection timed out
So this is all well and good for working in the Windows environment - I just need to enable the firewall client.
My problem is that I'm trying to work within a Ubuntu VM on Virtual Box.
The Virtual Box network adapter is NAT, with no port forwarding.
In the VM HTTP traffic works fine, so long as I've set network proxy for HTTP and HTTPS in Ubuntu.
However, SSH here will give me connection refused:
david@david-VirtualBox:~$ ssh -vvv git@github.com
OpenSSH_7.2p2 Ubuntu-4ubuntu2.2, OpenSSL 1.0.2g 1 Mar 2016
debug1: Reading configuration data /home/david/.ssh/config
debug1: /home/david/.ssh/config line 2: Applying options for github.com
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug2: resolving "github.com" port 22
debug2: ssh_connect_direct: needpriv 0
debug1: Connecting to github.com [192.30.255.113] port 22.
Is there a way of debugging here how my Windows is able to SSH to the outside world?
1In your last quote, the connection refused error line is missing and might be useful to see. It might also be useful to add the
-v
parameter. Do you have access to the SSH server logs? – harrymc – 2018-02-17T10:47:20.3401when you say "network proxy for HTTP and HTTPS" where and to what exactly?
one way of tracing this would be to use wireshark (or the equivalent) see if there packets make their way out or not. – Raouf M. Bencheraiet – 2018-02-20T14:03:48.030