Questions[socks](server)

Squid'd default is to operate as an HTTP proxy; however, this FAQ https://docstore.mik.ua/squid/FAQ-4.html#ss4.10 says "No changes are necessary to use Squid with socks5. Simply add the usual -Dbind=SOCKSbind etc., to the compile line and -lsocks to the link line."

That sounds great and all except that I don't code c/c++ beyond knowing the basic syntax so typically when I compile something, it's ./configure and ./make. Occasionally I have to modify a makefile's compile line but I'm not sure about linking here (Though I get the concept of linking).

It's also a bit confusing to interpret exactly what to do by "add the usual X etc.," so if someone could point out the exact steps here it would be a great help since they don't seem to be detailed anywhere. It doesn't sound hard.

I already have squid compiled and running properly for HTTP connections but SOCKS support is a must.

I am using ssh -D 8080 my server to create a SOCKS proxy. I'm then configuring OS X to use localhost:8080 as a SOCKS proxy. I'm using this to access the internet without being monitored.

I'm using Google's DNS servers (8.8.8.8), but how do I make sure that DNS queries are going through the SSH tunnel?

I know how to setup a simple proxy using ssh -D ,but I want to use username and password based authentication for this case. Is there any way?

I am looking into implementing SSH tunneling as a cheap VPN solution for outside users to access Intranet-only facing web applications.

I currently am using Ubuntu Server 10.04.1 64 bit with OpenSSH installed.

I am using Putty on Windows boxes to create a tunnel on a local port to my ssh server.

start putty -D 9999 mysshserver.com -N

I then use tell Firefox to use a SOCKS proxy on localhost:9999.

The -N flag will disable the interactive shell from the client side. Is there a way to do this on the server side?

Besides disabling root access, using rsa key authentication, and changing the default port; are there any other obvious security practices I should follow for this purpose? My goal is to simply be able to tunnel web traffic.

I'm having performance problems using openssh (server) and putty (client) combination to use a remote webproxy. I'd like to disable encryption and test the results to see if it makes a difference. How can i do that? Is there anything i can modify in the sshd_config. I'm very new to openssh.

Any other ideas would be appreciated.

I've basically set my IE to use 127.0.0.1 socks as a proxy. I connect my putty to my openssh server at home and voila - I'm able to browse the internet through that. However, it's incredibly slow even though I know I have a fast connection to my home (ftp for example works at above 50Kbytes/sec.