How to set up that specific domains are tunneled to another server
- by Peter Smit
I am working at an university as research assistant. Often I would like to connect from home to university resources over http or ssh, but they are blocked from outside access. Therefore, they have a front-end ssh server where we can ssh into and from there to other hosts. For http access they advise to set up an ssh tunnel like this
ssh -L 1234:proxyserver.university.fi:8080 publicsshserver.university.fi
and put the proxy settings of your browser to point to port 1234
All nice and working, but I would not like to let all my other internet traffic go over this proxy server, and everytime I want to connect to the university I have to do this steps again.
What would I like:
- Set up a ssh tunnel everytime I log in my computer. I have a certificate, so no passwords are needed
- Have a way to redirect some wildcard-domains always through the ssh-server first. So that when I type intra.university.fi in my browser, transparently the request is going through the tunnel. Same when I want to ssh into another resource within the university
Is this possible? For the http part I think I maybe should set up my own local transparent proxy to have this easily done. How about the ssh part?
