Security Basics mailing list archives

Re: Socks Tunnel over SSH


From: Shreyas Zare <shreyas () secfence com>
Date: Fri, 25 Jun 2010 21:23:06 +0530

Hi John,

VPN is one option to changing ISP, the feasibility Arnold can only
know or find out. Sometime its difficult to get different ISPs in
places or may be other ISP in that area too has same restrictive
policies.

While if he is willing to spend few dollars per month, the can get a
OpenVPN service very quickly. There are many service providers (I
don't want to do marketing) which can be easily googled. And few also
provide free/trial service to check it out. I can mail personally to
Arnold if he needs some pointers.

Besides that, it would be difficult for someone willing to share
access to his ISP through his connection due to trust factors or due
to bandwidth restriction in place by his ISP.

Regards,

Shreyas Zare

Sr. Information Security Researcher
Secfence Technologies
www.secfence.com


On Fri, Jun 25, 2010 at 6:08 PM, John Morrison
<john.morrison101 () gmail com> wrote:
David,

As you say Shreyas is probably better off finding an ISP that will
provide the service he requires rather than spend a lot of time trying
to patch round any inadequacies in the service.

On 23 June 2010 19:58, David Gillett <gillettdavid () fhda edu> wrote:
What you want is called a VPN.  Note that some ISPs consider VPN use to be
"business class" and so may not permit it at all of their service levels.

If your needs routinely violate the service policies of your ISP, they would
appear to be a poor fit and you should probably be looking for one that
better meets your needs.  Simply attempting to evade their existing policy
enforcement mechanisms just helps build their case for adopting stricter
measures.

David Gillett, CISSP

-----Original Message-----
From: Shreyas Zare [mailto:shreyas () secfence com]
Sent: Wednesday, June 23, 2010 09:00
To: Arnold Bush
Cc: security-basics
Subject: Re: Socks Tunnel over SSH

On Wed, Jun 23, 2010 at 6:27 PM, Arnold Bush <arnoldwbush () gmail com> wrote:
Hi all
I'll be honest of my intentions upfront. My ISP doesn't allow me to do
P2P downloads. Furthermore, there are some websites (including those
providing legitimate data) that are not reachable from my ISP. I am
looking for a host that would allow me to create an HTTP tunnel over
SSH. This tunnel would keep my traffic somewhat hidden from my ISP's
eyes, right? I doubt if they have even average capability admins with
sufficient time to bother looking into individual encrypted tunnels.

To terminate that SSH tunnel, I am seeking someone who has an
unlimited download account with their ISP and my described usage
either falls within their acceptable usage policy or they don't care.
I think this is better than hopping between free shell providers out
there violating each one's usage policy one after the other. Any
information on people willing to share volunteer bandwidth?

Best regards
Arnold

Hi,

I don't know if you have considered the option to get a VPN service.
You can get a VPN service very easily, there are many providers which offer
OpenVPN and some even give basic service for free which can be used for
basic browsing needs. For heavy usage you will have to pay to get reliable
service though but it would be a good solution to the issue.

Regards,

Shreyas Zare

Sr. Information Security Researcher
Secfence Technologies
www.secfence.com

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: