Re: List postings as attachments
Lo, on Thursday, August 15, Craig Dickson did write:
> Hall Stevenson wrote:
>
> > Not possible... Proxy/firewall only allows ports 21, 80, 110, and 443
> > (https ??) and maybe some other(s) that I haven't discovered. Hell, port
> > 110 was blocked for a while so I had to use Mindspring's web-based mail
> > program. It was horrid.
Yes, 443 is https; see /etc/services for a list.
> Which firewall is this? Are you saying the firewall at your office won't
> let you have an _outbound_ ssh connection, or that Mindspring is
> blocking inbound ssh to residential customers? Either way, a complaint
> to the relevant authority is merited.
Blocking outbound ssh connections is fairly common, actually. Keep in
mind that, in a corporate setting, people are often just as concerned
about internal stuff leaving the network as they are with external
crackers getting into the network. This concern is usually held up as a
justification for that kind of firewall config.
My previous employer did something like this; I imagine this was their
rationale, although I never asked. I've worked with other companies
where the above was the official line, though.
Disclaimer: I never said these were *good* reasons; they're just the
reasons people usually cite for blocking outgoing connections. I find
it pretty ridiculous, myself. First, if somebody has a web site on a
non-standard port, you can't get to them. Second, Craig's suggestion
below works very nicely.
> Have you thought of doing something sneaky like configuring your home
> sshd to run on port 21 or 443? That might work if the firewall is merely
> letting traffic on those ports through, rather than proxying.
When I was at my previous company, I just ran sshd on port 443; they
didn't have any sort of proxy on that port. Originally, I ran it on
port 21, but they slapped a proxy firewall on outgoing FTP connections.
Works beautifully, and as another poster noted, once you've got an ssh
connection established, you can tunnel arbitrary TCP communications
across that connection, so the door's wide open at that point.
Richard
Reply to: