Using SSH for the IHUB

[sodusme]

I've been reading about this today as I didn't know too much about how it works. I have to say I like it!! I like it a lot!! In reading about this it looks like you can also use encryption that is not easily breakable to keep just anyone from logging in or brute forcing in. I was going to post this link in the "how to/faqs" but I guess it would have to be moved there if deemed by the mods. Here's a couple links to help you all starting up with SSH and tunneling hxxp://www.putty.org/
hxxp://www.bitvise.com/download-area

It looks like the putty site has a couple programs one of which is "putty" and the other is "bitvise tunnelier" (posted by Jim Bass in the how to/faqs). It also looks like it includes a 30 day free SSH server which I saw mentioned in the "how to proxy IHUB" write up...they said you had to pay for one if I read it right. WinSSHD is a 30 day free trial. The bitvise site has a TON of information on how to set this up and explains it rather easily. I'm going to be searching for some FREE ssh servers. I'll post 'em when I find some.

EDIT*

These are not tested by me BUT listed as FREE ssh servers. Please test them out and post back if they are not free.

hxxp://mobassh.mobatek.net/en/
hxxp://www.brothersoft.com/ssh-server-download-157971.html
hxxp://www.freesshd.com/index.php?ctt=overview
hxxp://www.download3000.com/download-axessh-windows-ssh-client-and-ssh-server-count-reg-48033.html (listed as a client and a server all in one...in which case you shouldn't need bitvise tunnelier or putty)
hxxp://www.kpym.com/2/kpym/index.htm

Another list of some free ssh servers. These will require you to login to use them. I do NOT know if they are still active.

Free SSH / Shell server located at United States [US]
IP address: 204.11.53.145
Port: 22
Username: cpnpsis
Password: cppass

Free SSH /Shell Server located at United States [US]. It belongs to Harry Sufehmi. Many thanks for him.
IP Address: 72.36.215.178
Port: 222
Username: net
Password: cepat123

Free SSH / Shell Server located at Amsterdam - Holland
IP Adress: 213.189.27.92
Port: 22
Username: uwdomein
Password: admin

Free SSH Server located at United States [US]
IP Adress: 72.36.193.218
Port: 22
Username: rvsite
Password: demo9


Now again these are untested by me. Hopefully someone can test them out and post back with how they work to help others.

[metalcutter]

tested at 2009/06/21, none are working at this moment.

[sodusme]

Do you mean the ones that are posted in i.p form are not working? What about the others like "mobassh.mobatek.net/en/" and so on...are those at least working? I see where the amsterdamn one and the first us one work as far as logging in but I think the username/pass's must of been changed.

[metalcutter]

all the ones that are IP addressed
but ssh just gets you to another server, then what are you going to do?
you could tunnel via ssh, from what I can see of the Ihub setup It will not do a ssh tunnel.

[magic4]

This already proven to work well. There's offshore SSH tunnel site you should use, very fast and reliable. Ihub works well with SSH tunnel. Bitvise opened a SSH tunnel to the offshore site then you will use Tor proxy software to proxy inside the encrypted tunnel, then the blackRock custom software will route the Ihub traffic through the Tor proxy and inside the SSH tunnel to Ihub server. ISP can not see what's going on inside the tunnel. Nfusion used ENCRYPTED UDP package no send data to IKS server, inside the UDP package there's ip address and data, but since the package is encrypted, ISP can not see that you're connect to IKS server proxy or not. The theory about UDP is there is to end to end tracking like TCP package where you have source and destination handshake. This can be easily trace. UDP send the package and not waiting for destination's respond. Nfusion will send an encrypted udp package to a proxy server A and received respond from another proxy server B. So using UDP encrypted package is impossible to trace. If ISP can decrypted the package, the trace is also very differcult. They have to have network sniffer on every gateway to follow the package.

[metalcutter]

ok, how do you set up a tunnel with the I hub?
any pointers to a howto?

[sodusme]

Originally Posted by magic4

This already proven to work well. There's offshore SSH tunnel site you should use, very fast and reliable. Ihub works well with SSH tunnel. Bitvise opened a SSH tunnel to the offshore site then you will use Tor proxy software to proxy inside the encrypted tunnel, then the blackRock custom software will route the Ihub traffic through the Tor proxy and inside the SSH tunnel to Ihub server. ISP can not see what's going on inside the tunnel. Nfusion used ENCRYPTED UDP package no send data to IKS server, inside the UDP package there's ip address and data, but since the package is encrypted, ISP can not see that you're connect to IKS server proxy or not. The theory about UDP is there is to end to end tracking like TCP package where you have source and destination handshake. This can be easily trace. UDP send the package and not waiting for destination's respond. Nfusion will send an encrypted udp package to a proxy server A and received respond from another proxy server B. So using UDP encrypted package is impossible to trace. If ISP can decrypted the package, the trace is also very differcult. They have to have network sniffer on every gateway to follow the package.

If I'm reading and understanding this correctly which I'm sure I am this is a 3-part deal. You need "blackrock" (which is available here) you need "tunnelier" (which is available here-or similar ssh "client") AND you need a ssh server which as I see it at this point is not available here. Someone needs to post this "offshore tunnel site" with the username/password then so these people can get up and running. Without an ssh server to connect to you are not going to get this to work. Magic4 when you say "offshore tunnel site" I'm assuming you mean the ssh server? Please post it then if you have it...

I don't want to turn this into an Nfusion discussion but UDP is not any safer then TCP. There are differences in the traffic but as far the encryption being "impossible to trace"....keep dreaming. I've said it a million times and now I'll say it a million and one....look up DPI (Deep Packet Inspection) my friend....your isp can trace ANY packet whether its UDP or TCP makes no difference. UDP does not give a handshake true, UDP does not care if the packet arrives true, UDP gets the packets there in no particular order true, UDP is more secure false....with todays technology your isp can spy on ANY packet on their network. I'm not sure who from the Nfusion camp keeps putting out this dribble and it is dribble but they need to do some more reading.

[bigmik]

And my question was where to find this ssh server, connect and make it work?

[sodusme]

Thats my question too bigmik. Because in the "how to proxy ihub" file posted in the faqs the writer of that document (not Jim he was merely reposting) eludes to

So what I personally do, is make use of one of the handful of SSH accounts I have, and "tunnel" through it. The end result is that not only is the entire tcp stream encrypted to your ISP (they can't see anything but SSH data) but also that the IP actually communicating with the IKS server is a 3rd party host, and not your own. Before inputting your servers IP and login info, go ahead and click the Services tab.

That is telling me that you need to use a certain server with a login and password to get to this work using ssh tunnelling. Has anyone gotten this to work btw? I'm not testing an IHUB but tried to get this program up and running and you need a server login/password for the ssh client. The following picture also tells me there is something missing here. Notice the red blurred out area? That is the ssh server you need to be connecting to....otherwise this either will not work or will not be anonymous (I don't know which as I'm not testing an IHUB). But you have to get an ssh server to make this work. I still don't know if anyone has gotten any of the other ones that I posted to work. I know the ones in i.p form do NOT work I have tried them myself. I am on the road this week and cannot test any of these for the time being.

[olympusom]

well i'm impressed! nice research. you're about a few light years ahead so if no objections i'll stick to the easy stuff.