How To: Tunnel/Proxy CCcam on UR with dropbear

ToneDeff · 22nd June 2010, 03:21

Had been wondering about the posibility for tunneling connections on my TM for a while, already had an ssh server setup for other things and stumbled across an ssh client used on some Enigma images that had the ability for remote port forwarding on certain version.

using "dropbear" to connect to an ssh server your able to hide your home i.p from cccam servers and also hide the data being sent from your isp.

here's a guide to how i got it working, it's deffinelty not for someone without a fair bit of linux experience, and you'll need a "Remote Server" that has SSH running.

-ftp DropBear.0.52-UR.tar.gz to /tmp/
-manual install from addons
-open telnet session to "UR"
-then enter ln -s /var/dropbear/bin/dropbearmulti /var/dropbear/ssh
-then connect to the remote server with /var/dropbear/ssh user@ssh.server.ru/920

Code:

ssh client = /var/dropbear/ssh
ssh user = user
ssh server.address/port= @ssh.server.ru/920

it will show

Code:

/var/dropbear/ssh: Warning: failed creating //.ssh: Read-only file system

Host 'ssh.server.ru' is not in the trusted hosts file.
(fingerprint md5 ****************************)
Do you want to continue connecting? (y/n) y
user@ssh.server.ru's password:

-press y
-then enter the ssh server password
-if it logs in ok then you can continue ;P
-type exit to get back to UR telnet

-get your clines

Code:

C: server.no-ip.biz 12000 ***** *****
C: server2.no-ip.biz 12001 ***** *****

-now you need to create ssh login lines to forward those address through tunnel

Code:

/var/dropbear/ssh -f user@ssh.server.ru/920 -L 12000:server.no-ip.biz:12000
/var/dropbear/ssh -f user@ssh.server.ru/920 -L 22001:server2.no-ip.biz:12001

tunnel port = 22001: *i made this 1k higher then the first tunnel no reason to aslong as it's different
cline serv = server2.no-ip.biz:12001

also added -f so that you can close telnet and tunnel stays connected

and -L to enable to port tunneling option

-once you have lines ready enter them into telnet to "UR"
-/var/dropbear/ssh -f user@ssh.server.ru/920 -L 12000:server.no-ip.biz:12000
do the same login procedure as first time, after password you will get put back to "UR" telnet
-enter any other lines you need after changing tunnel port and server
-/var/dropbear/ssh -f user@ssh.server.ru/920 -L 22001:server2.no-ip.biz:12001
-you can now close telnet session.

-now open cccam.cfg and edit the clines to

Code:

C: localhost 12000 ***** *****
C: localhost 22001 ***** ***** 

change addresses to localhost and the ports to the new "tunnel ports" you set on dropbear

if it all worked it should clear now

hope that makes some kind of sense, at least it will remind me how to do it when i forget

i only use cccam as a client not sure if dropbear would be able to accept incoming request from the remote i.p to share a local out, although it might be possible with right settings i didn't look into that side.

i think it will work with any CAM's as all the tunneling etc is done by dropbear and is forced by what address you set CAM to use.

p.s
you need to reconnect ssh tunnels after rebooting box.

-open telnet session to "UR"
-/var/dropbear/ssh -f user@ssh.server.ru/920 -L 12000:server.no-ip.biz:12000
-/var/dropbear/ssh -f user@ssh.server.ru/920 -L 22001:server2.no-ip.biz:12001
-enter passwords then close telnet.

p.p.s
"dropbearmulti" contains all the ssh server etc, all i have tested and being used in this is the ssh client.

ToneDeff · 23rd June 2010, 13:06

just realised you don't need to start multiple tunnels to tunnel multiple ports you can add them to a single connection

e.g

/var/dropbear/ssh -f user@ssh.server.ru/920 -L 12000:server.no-ip.biz:12000
/var/dropbear/ssh -f user@ssh.server.ru/920 -L 22001:server2.no-ip.biz:12001

could actually be done with just

/var/dropbear/ssh -f user@ssh.server.ru/920 -L 12000:server.no-ip.biz:12000 -L 22001:server2.no-ip.biz:12001

p.s
think i've figured out how to tunnel back the other way for "cccam servers", so client could connect to port on the "remote" ssh server and get forward back to your home network, ill do some tests and hopefully post guide in abit.

ToneDeff · 23rd June 2010, 13:44

well think i'm going to give up on the reverse port, using this

var/dropbear/ssh -f user@ssh.server.ru/920 -R 16002:localhost:16001

will forward port 16002 on the "remote" ssh server back to port 16001 on your local network "without needing any ports opened on home network", but that only works when connecting through ssh on "localhost:16002"

i can't get it to work with the "remote" ssh servers external i.p. i use my ssh server for alot of other stuff and don't wan't to go breaking it when i don't need this functioning myself

this method would work if both cccam client/server are connected to the same ssh server, and client uses "localhost" as cccam serv.

ToneDeff · 23rd June 2010, 20:57

this method should work for client/server both using the same ssh server, i'm unable to test it though. would mean that the only place traffic isn't hidden in an ssh tunnel is within "remote" ssh server.

server and client don't need any ports forwarded on their home networks and only port that needs to be open on remote server is the one for ssh...

e.g
server box uses : links "localhost:31000" on the remote ssh server back through tunnel to port *12000 on cccam box. *change if not using default cccam port

Code:

var/dropbear/ssh -f user@ssh.server.ru/920  -R 31000:localhost:12000

clients box use : links "localhost:12000" on client TM through tunnel to "localhost:31000" on remote ssh server.

Code:

/var/dropbear/ssh -f user@ssh.server.ru/920 -L 12000:localhost:31000

client then uses cline

Code:

C: localhost 12000 ***** *****

i think on the fline restriction you could also limit it just to "localhost" or "127.0.0.1" not sure about how that works though.

Edit:
just realised not much to worry about fline restrictions if the port is closed

ephagous · 18th July 2010, 10:05

with this command

/var/dropbear/ssh root@my_ssh_server/22

it's ok.i can login as root on my_ssh_server
but when i was type

/var/dropbear/ssh -f root@my_ssh_server/22 -L 22000:my_db_server:18000

i was receive this message

/var/dropbear/ssh: exited: command required for -f

what's a problem?

ToneDeff · 18th July 2010, 14:02

only way i'm able to get that error is by doing with with no extra commands e.g

"/var/dropbear/ssh -f user@ssh.server.ru/920" gives error

but

"/var/dropbear/ssh -f user@ssh.server.ru/920 -N"
"/var/dropbear/ssh -f user@ssh.server.ru/920 -L 12000:server.no-ip.biz:12000"

etc, i can't get that error so not sure what going on, possibly try

"/var/dropbear/ssh -f root@my_ssh_server/22 -L 22000:my_db_server:18000 -N"

the error is coming from "-f" which is the option to keep tunnel alive on box after you close telnet, and the error is saying it has no commands to keep alive.

also "/var/dropbear/ssh root@my_ssh_server/22 -L 22000:my_db_server:18000" then test it without closing telnet session.

p.s
i wouldn't leave remote ssh on default port no matter how secure you think pass is ;P

nozzer · 18th July 2010, 14:07

Interesting but I cant see too many people having access to a remote ssh server to connect to.Why not try and set up a standard PPTP or L2TP tunnel to one of the fairly cheap (few £ per month) VPN providers.

There's loads of linux source for such clients so it shouldn't be too difficult to compile one for a linux stb.

ToneDeff · 18th July 2010, 14:37

the UR image is fairly limited i couldn't find a way to get any VPN client running without editing image.

i already had ssh running and being used for tunneling on remote dedicated server, and didn't want to break it trying to install VPN server on there, didn't really expect many people to use this but thought i might aswell post as i had managed it, if only for my own usage when i forget how i did it.

also you can get a VPS server with ssh access pretty easily, probably about the same or cheaper then most VPN providers.

ephagous · 19th July 2010, 18:14

Hi ToneDeff
with this command It's work for me

/var/dropbear/ssh -L 22000:my_db_server:18000 root@my_ssh_server/22

but i must type my_ssh_server's password before then a tunnel was created and remote to my_db_server
how can i solve this problem?

ToneDeff · 19th July 2010, 21:22

Quote:

Originally Posted by ephagous

Hi ToneDeff
with this command It's work for me

/var/dropbear/ssh -L 22000:my_db_server:18000 root@my_ssh_server/22

but i must type my_ssh_server's password before then a tunnel was created and remote to my_db_server
how can i solve this problem?

without the "-f" that tunnel will close as soon as you close telnet on PC.

and i'm not sure of a way to make it auto log in.

23rd June 2010, 13:06	#2 (permalink)
ToneDeff DW Top Poster + Join Date: Jul 2009 Location: 127.0.0.1 Posts: 613 Thanks: 24 Thanked 299 Times in 151 Posts	Re: How To: Tunnel/Proxy CCcam on UR with dropbear just realised you don't need to start multiple tunnels to tunnel multiple ports you can add them to a single connection e.g /var/dropbear/ssh -f user@ssh.server.ru/920 -L 12000:server.no-ip.biz:12000 /var/dropbear/ssh -f user@ssh.server.ru/920 -L 22001:server2.no-ip.biz:12001 could actually be done with just /var/dropbear/ssh -f user@ssh.server.ru/920 -L 12000:server.no-ip.biz:12000 -L 22001:server2.no-ip.biz:12001 p.s think i've figured out how to tunnel back the other way for "cccam servers", so client could connect to port on the "remote" ssh server and get forward back to your home network, ill do some tests and hopefully post guide in abit. __________________ UK Channel List & 8 Day EPG... Last edited by ToneDeff; 23rd June 2010 at 14:54.

23rd June 2010, 13:44	#3 (permalink)
ToneDeff DW Top Poster + Join Date: Jul 2009 Location: 127.0.0.1 Posts: 613 Thanks: 24 Thanked 299 Times in 151 Posts	Re: How To: Tunnel/Proxy CCcam on UR with dropbear well think i'm going to give up on the reverse port, using this var/dropbear/ssh -f user@ssh.server.ru/920 -R 16002:localhost:16001 will forward port 16002 on the "remote" ssh server back to port 16001 on your local network "without needing any ports opened on home network", but that only works when connecting through ssh on "localhost:16002" i can't get it to work with the "remote" ssh servers external i.p. i use my ssh server for alot of other stuff and don't wan't to go breaking it when i don't need this functioning myself this method would work if both cccam client/server are connected to the same ssh server, and client uses "localhost" as cccam serv. __________________ UK Channel List & 8 Day EPG... Last edited by ToneDeff; 23rd June 2010 at 14:54.

23rd June 2010, 20:57	#4 (permalink)
ToneDeff DW Top Poster + Join Date: Jul 2009 Location: 127.0.0.1 Posts: 613 Thanks: 24 Thanked 299 Times in 151 Posts	Re: How To: Tunnel/Proxy CCcam on UR with dropbear this method should work for client/server both using the same ssh server, i'm unable to test it though. would mean that the only place traffic isn't hidden in an ssh tunnel is within "remote" ssh server. server and client don't need any ports forwarded on their home networks and only port that needs to be open on remote server is the one for ssh... e.g server box uses : links "localhost:31000" on the remote ssh server back through tunnel to port 12000 on cccam box. change if not using default cccam port Code: var/dropbear/ssh -f user@ssh.server.ru/920 -R 31000:localhost:12000 clients box use : links "localhost:12000" on client TM through tunnel to "localhost:31000" on remote ssh server. Code: /var/dropbear/ssh -f user@ssh.server.ru/920 -L 12000:localhost:31000 client then uses cline Code: C: localhost 12000 *** * i think on the fline restriction you could also limit it just to "localhost" or "127.0.0.1" not sure about how that works though. Edit: just realised not much to worry about fline restrictions if the port is closed __________________ UK Channel List & 8 Day EPG...** Last edited by ToneDeff; 23rd June 2010 at 22:45.

18th July 2010, 10:05	#5 (permalink)
ephagous Newbie Join Date: Jul 2010 Posts: 2 Thanks: 0 Thanked 0 Times in 0 Posts	Re: How To: Tunnel/Proxy CCcam on UR with dropbear with this command /var/dropbear/ssh root@my_ssh_server/22 it's ok.i can login as root on my_ssh_server but when i was type /var/dropbear/ssh -f root@my_ssh_server/22 -L 22000:my_db_server:18000 i was receive this message /var/dropbear/ssh: exited: command required for -f what's a problem?

18th July 2010, 14:02	#6 (permalink)
ToneDeff DW Top Poster + Join Date: Jul 2009 Location: 127.0.0.1 Posts: 613 Thanks: 24 Thanked 299 Times in 151 Posts	Re: How To: Tunnel/Proxy CCcam on UR with dropbear only way i'm able to get that error is by doing with with no extra commands e.g "/var/dropbear/ssh -f user@ssh.server.ru/920" gives error but "/var/dropbear/ssh -f user@ssh.server.ru/920 -N" "/var/dropbear/ssh -f user@ssh.server.ru/920 -L 12000:server.no-ip.biz:12000" etc, i can't get that error so not sure what going on, possibly try "/var/dropbear/ssh -f root@my_ssh_server/22 -L 22000:my_db_server:18000 -N" the error is coming from "-f" which is the option to keep tunnel alive on box after you close telnet, and the error is saying it has no commands to keep alive. also "/var/dropbear/ssh root@my_ssh_server/22 -L 22000:my_db_server:18000" then test it without closing telnet session. p.s i wouldn't leave remote ssh on default port no matter how secure you think pass is ;P __________________ UK Channel List & 8 Day EPG...

18th July 2010, 14:07	#7 (permalink)
nozzer Moderator+ Join Date: Jan 2005 Location: Max pestering me for rechargable batteries for something or other ???? Posts: 6,039 Thanks: 5 Thanked 120 Times in 72 Posts	Re: How To: Tunnel/Proxy CCcam on UR with dropbear Interesting but I cant see too many people having access to a remote ssh server to connect to.Why not try and set up a standard PPTP or L2TP tunnel to one of the fairly cheap (few £ per month) VPN providers. There's loads of linux source for such clients so it shouldn't be too difficult to compile one for a linux stb.

18th July 2010, 14:37	#8 (permalink)
ToneDeff DW Top Poster + Join Date: Jul 2009 Location: 127.0.0.1 Posts: 613 Thanks: 24 Thanked 299 Times in 151 Posts	Re: How To: Tunnel/Proxy CCcam on UR with dropbear the UR image is fairly limited i couldn't find a way to get any VPN client running without editing image. i already had ssh running and being used for tunneling on remote dedicated server, and didn't want to break it trying to install VPN server on there, didn't really expect many people to use this but thought i might aswell post as i had managed it, if only for my own usage when i forget how i did it. also you can get a VPS server with ssh access pretty easily, probably about the same or cheaper then most VPN providers. __________________ UK Channel List & 8 Day EPG...

19th July 2010, 18:14	#9 (permalink)
ephagous Newbie Join Date: Jul 2010 Posts: 2 Thanks: 0 Thanked 0 Times in 0 Posts	Re: How To: Tunnel/Proxy CCcam on UR with dropbear Hi ToneDeff with this command It's work for me /var/dropbear/ssh -L 22000:my_db_server:18000 root@my_ssh_server/22 but i must type my_ssh_server's password before then a tunnel was created and remote to my_db_server how can i solve this problem?

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode