Re: Defeating Firewalls: Sneaking Into Office Computers From Home

From: Leythos (void_at_nowhere.lan)
Date: 08/12/05 

Date: Fri, 12 Aug 2005 15:12:00 GMT

In article <1123859197.303106.293860@g47g2000cwa.googlegroups.com>,
manugarg@gmail.com says...
> But, I am just skipping firewall and there is no web server at all in
> the picture. What I need is just http(s) proxy and an ssh server on
> the internet (which I am supposed to have at home). I'll setup
> connection to the ssh server using https proxy and ride back on that
> SSL connection.
>
> No offense meant, but I think you didn't read the paper completely. :)

So, you're saying that from your office you can connect to your home
using https and then from your home you can ride back through the https
connection into the computer at your office?

I guess I would have to know why your company allows you outbound access
to all internet sites, why residential address blocks are not blocked,
why they don't terminate https sessions after x amount of time, and how
they can miss an active https session that's connected for any length of
time beyond the norm.

It would be interesting to see if our firewalls permitted what you
describe - we will test this weekend, but I don't think it will work on
our networks. 

-- 
spam999free@rrohio.com
remove 999 in order to email me

Relevant Pages

  • Re: RPC over HTTPs
    ... and I did make the changes in the registry. ... on the server told me that store.exe was not actually listening on port 6001 ... THAT will break RPC over HTTPS for sure. ... I can see the 'mail' connection tries to ...
    (microsoft.public.exchange.connectivity)
  • Re: Defeating Firewalls: Sneaking Into Office Computers From Home
    ... I am just skipping firewall and there is no web server at all in ... What I need is just httpproxy and an ssh server on ... >> SSL connection. ... >using https and then from your home you can ride back through the https ...
    (comp.security.firewalls)
  • Re: RPC over HTTPs
    ... THAT will break RPC over HTTPS for sure. ... HTTPS in a single server environment, but that information has been rolled ... The server runs Exchange 2003 with the latest patches. ... I can see the 'mail' connection tries to ...
    (microsoft.public.exchange.connectivity)
  • Re: Secure Web-Access to VSS
    ... The type of the connection to that server is determined ... If the client settings are set to always use SSL, https connection will be ... tried directly (and you'll have the options of connecting with different VSS ...
    (microsoft.public.vstudio.sourcesafe)
  • Re: Outgoing POP3 email missing/lost/not received
    ... Funny thing is that I have had this ISP for 8 years and it has always been ... It looks like when you last ran CEICW, you set the ISP's mail server to: ... Internet Connection Wizard. ... After the wizard completes, the following network connection ...
    (microsoft.public.windows.server.sbs)