[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Secure browsing across insecure LAN



On Sun, Feb 16, 2003 at 01:27:20AM -0600, Dr. Aldo Medina wrote:
> In my workplace they just installed Internet access. However, I wish I
> could navigate privately some sites (for example, Dmoz.org, where I
> edit), at least privately from some personal in my company with access
> to the server. So I think in creating some kind of private tunnel
> between my work's computer and my home's one, and accessing Internet
> from my home and tunneling to my work.
> 
> However, I doubt which method could be better (easier to
> install/manage?), I'm looking to Dante, Ipsec, socat or maybe some other
> VPN. However, as I only want to secure WWW, maybe I could just use some
> kind of SSL service, or maybe even some proxy-ssh combo?.
> 
> Does any one have any suggestion?

My suggestion would be to just install a modern (>=3.0, IIRC) version of
OpenSSH on both machines, then use it to create a SOCKS4 forwarding
proxy thingy.  Just point connect to your home machine, and point your
browser at work the the proxy port OpenSSH creates on the localhost.

If your work is blocking outgoing SSH, then run SSH at home on port 80
or such.  If they're proxying port 80 through some sort of
HTTP-understanding proxy, then use httptunnel.  Be careful though,
because despite how stupid your workplace's policy is, they can still
sack you if they don't like you evading their poorly designed Big
Brother system :-)

-- 
Rob Weir <rweir@ertius.org>				http://ertius.org/

Attachment: pgp35CTOpI5MT.pgp
Description: PGP signature


Reply to: