Comments on: Secure travelling tips with iptables and SSH port forwarding http://www.bytebot.net/blog/archives/2007/12/06/secure-travelling-tips-with-iptables-and-ssh-port-forwarding A permanent record for what's interesting today - this is my live journal Wed, 10 Mar 2010 10:35:48 -0500 http://wordpress.org/?v=2.9.2 hourly 1 By: Colin Charles Agenda » Blog Archive » Secure travelling with ipfw on OS X? http://www.bytebot.net/blog/archives/2007/12/06/secure-travelling-tips-with-iptables-and-ssh-port-forwarding/comment-page-1#comment-134322 Colin Charles Agenda » Blog Archive » Secure travelling with ipfw on OS X? Tue, 27 May 2008 06:05:55 +0000 http://www.bytebot.net/blog/archives/2007/12/06/secure-travelling-tips-with-iptables-and-ssh-port-forwarding#comment-134322 [...] so if the SSH tunnel isn’t up, I can’t POP my mail. I wrote about this in Secure travelling tips with iptables and SSH port forwarding, as that’s what I do on [...] [...] so if the SSH tunnel isn’t up, I can’t POP my mail. I wrote about this in Secure travelling tips with iptables and SSH port forwarding, as that’s what I do on [...]

]]> By: Russell Coker http://www.bytebot.net/blog/archives/2007/12/06/secure-travelling-tips-with-iptables-and-ssh-port-forwarding/comment-page-1#comment-130518 Russell Coker Fri, 07 Dec 2007 12:04:45 +0000 http://www.bytebot.net/blog/archives/2007/12/06/secure-travelling-tips-with-iptables-and-ssh-port-forwarding#comment-130518 Why would you want to ever have unencrypted POP connections? I tunnel all my POP connections through SSH all the time, small transfers have little overhead and messages with big attachments actually go faster due to the -C option. For web browsing I use a local instance of Squid. If I was feeling paranoid about my web access I could reconfigure Squid to tunnel it easily and have all my HTTP client programs immediately be less vulnerable. Why would you want to ever have unencrypted POP connections?

I tunnel all my POP connections through SSH all the time, small transfers have little overhead and messages with big attachments actually go faster due to the -C option.

For web browsing I use a local instance of Squid. If I was feeling paranoid about my web access I could reconfigure Squid to tunnel it easily and have all my HTTP client programs immediately be less vulnerable.

]]>