[AuckLUG] Funky ways of getting where you want with SSH

[Michal Ludvig]

Chilling_Silence wrote:

> Recently work has blocked anything not on a standard http / ftp (Prolly
> https and one or two other things) from getting out through the proxy.
> 
> I know that Webmin has a java-based client that allows you to connect to
> the local box its running on remotely, however this seems to be broken,
> although the non-interactive prompt that allows you to simply submit
> bash commands seems to work (But this is useless if I wanna use
> something like nano).

Do they really block all other traffic or are they those
Use-Mouse-Only-Admins who don't understand much what they do and only
used their firewall webinterface to block some TCP ports?

Can you get UDP through? If yes just use some of the VPN tunnels that
work over UDP (e.g. OpenVPN does)

If UDP is not an option - can you get ICMP packets through? Try this
TCP-over-ICMP tunnel: http://www.cs.uit.no/~daniels/PingTunnel/

There are other tunneling solutions for VPN-over-<something-weird>.
E.g. VPN-over-HTTP/S that could pass HTTP proxies:
http://www.runslinux.net/projects/htun/description.html

Or VPN-over-DNS that could pass through your provider/company DNS
servers: http://www.lucas-nussbaum.net/blog/?p=168

Disclaimer: I haven't personally tried any of the above, but am
definitely interested in your success stories ;-)

HTH,

Michal
* http://www.logix.cz/michal