TC vs Proxy - WebDav & FTP (SSH Tunneling)

[seb-]

Hi all,

for security reasons while travelling i just configured Putty to act as a Proxy and tunnel traffic from my laptop to my SSH server at home.

I noticed a few things

a) WebDav Plugin
It seems the WebDAV plugin only works when i explicitly configure the Ports, i.e. when trying to Connect to my NetworkAttachedStorage using WebDav (that runs on Port 5006) i need to setup the WebDav connection to connect to localhost:9999 and configure Putty to forward requests on Port :9999 to NAS_Internal_IP:5006

Connecting to https://NAS_Public_DynDNS:5006 or even https://NAS_Internal_IP:5006 will immediately fail

b) FTP Connections
For FTP Connections the Proxy Handling seems far more advanced as it is even possible to setup multiple proxies.

It seems that tunneling is working okay, but DNS Requests are still sent to the default DNS outside of the tunnel, i.e. i can Capture them with wireshark.

Firefox has an extra configuration (about:config) to use DNS via Proxy: network.proxy.socks_remote_dns

Any chance - at least for b) - to be improved?
I can live with a)

A option to configure Proxy Usage for complete Totalcommander would be very convenient.

Anyone using SSH tunneling in combination with TC as well and can share Experiences?

br
sebastian

[ghisler(Author)]

TC just uses the operating system DNS calls using getaddrinfo. You need to define a http proxy within the WebDAV plugin, then TC will just send the URL to that proxy, and the proxy will resolve it.

[seb-]

Thanks for the Quick Reply.

What about b)? Any possibility to force routing of DNS Requests through the given Proxy?

[ghisler(Author)]

I'm not aware of any DNS proxy. DNS uses UDP, and there are no UDP proxies (or are there?).

[seb-]

I dont exactly know how it works, but not tunneling DNS requests kind of decreases the "security experience".
Firefox also needs a hidden switch (as i wrote above) for it...

[Sob]

@seb-: TC can do that too. Just use SOCKS5 server for FTP and then TC won't resolve the hostnames locally, but will let proxy server to resolve them.