PDA

View Full Version : Work, school, library firewall restricting access ?


Fred
05-22-2006, 03:14 PM
Hi,

English isn't my native language, so if any corrections could be made, don't worry and tell me ;)
This is a very fast how-to... and i bet my verb tenses aren't appropriate everywhere ... but this text isn't for linuxjournal magazine... It's for our friendly forums members :)

So why i do this ?
I often work/study from my favorite library... The Great Library of Quebec ( here's info about the library : http://en.wikipedia.org/wiki/Grande_Biblioth%C3%A8que_du_Qu%C3%A9bec )

They are blocking outside connection to any port except 80 and 443. This is pretty common. My college was doing the same.
Luckily, my university ( http://en.wikipedia.org/wiki/%C3%89cole_de_technologie_sup%C3%A9rieure ) isn't blocking anything...

First of all, you need an ssh server who listens on port 443 or 80 because they are the only ports you can use to go outside.
This cannot be done if you have Apache running on those port, remember that http listening on port 80 and https on port 443.
Of course, if you find that another port is available, you can use it...

I have a small vps outside powervps network where the only thing that listens is ssh so i can without trouble make it listens on port 443.
If you can't do it on your vps, try at home. It could be done even if you have windows at home, ssh server exists for windows, look on google. You just need a port that your ISP isn't filtering. ISP usually filter ports like 25, 80... :)

For the rest of the text, i will presume you have your ssh server running on port 443.

So once you have the ssh server listening on port 443, you will have to open a ssh connection from the computer where you are blocked. If you are using putty, you will have to do the following.

In the hostname and port to connect to, you write your_server_hostname and port 443 ...

Then you go in the ssh option and select the tunnel configuration.
In Source Port, you write any local port you want. say 2002
In Destination, you write the place you want to go, so my_whm_server.com:2087

You open the connection, you write your user and password and leave the putty running for as long as you need your tunnel....

Now, go to your firefox ( or whatever browser you use ) and write https://localhost:2002

That's it guys! You are on your whm on port 2087 ...

You can do this with any port you want ... by changing the Destination in the Tunnel configuration ...

I hope it helps someone :)

Fred
05-22-2006, 03:33 PM
Maybe i should add that some firewall looks the traffic to see if it's real and valid traffic. So on port 443, the firewall could check if the traffic is http with SSL ... if it finds it isn't, it could block it...
That's what my college was doing... So be noticed of the possibility of fail :)