Firewall Tunneling, proxy, etc. - Tilted Forum Project Discussion Community

insidious_machinae · 10-15-2003, 12:23 PM

Hello everyone. This is my first post in Tilted Computers (I *think*). Anyway, I have a problem that I'm hoping some of you might be able to assist me with.

I recently moved into a dorm at San Jose State University (California). Well, they have insanely tight security on the network, with a badass firewall that basically blocks all access to the Internet except normal web browsing, FTP, and instant messaging. The problem is that my friends and I can no longer use any of our favorite network games and programs (KaZaA, Quake 3, DC++, bitTorrent, etc.). So, I'd like to know if there's anyway I can somehow set up a proxy program on my computer to make these programs work. I have no access to the router, the firewall, or the main system in any way.

One other thing: I recently bought an IOGear Bluetooth starter kit (2 wireless USB adapters). I cannot connect any computer to mine for Internet Connection Sharing because the ports we have in each room are limited to only a specific IP address per port. So, I can't even use a router. Any suggestions on how to get that working?

Thanks for your time.

nukeu666 · 10-15-2003, 01:07 PM

i feel your pain
im also in college with insane bandwidth witth EVERYTING blocked including FTP's

i use http-tunnel but the bad news is that its going to become a paid service from the 19th
kazaa can connect thru port 80 but its real slow...
NO other p2p prog has run till now
tho irc+DCC works(badly) with trillian+http-tunnel+sockscap
sockscap catches all outgoing data from a program and sends it to a socks server(http-tunnel)
tunnel works thry port 80

cliche · 10-15-2003, 01:43 PM

You could tunnel things over port 80 to each other (for net games etc). Sadly not easy to contact outside computers on blocked ports unless you can persuade someone outside the firewall to take the port 80 packets and turn them back to whatever...

As for ICS - you should be able to do things fine if you're not bridging - set the computer with the internet to run on the bluetooth network as 10.0.0.1, the slave computers as 10.0.0.x (from 2 to 254) with DNS 10.0.0.1 and gateway 10.0.0.1. The host computer will make the requests itself, using the one ip correctly allocated to it, and send things back over the bluetooth network using the 10.0.0.x address. So your college never sees the bluetooth network - it looks like just the one computer is making all the requests.

Latch · 10-15-2003, 04:51 PM

2 programs I've used before are Socks2HTTP and KaZaaHTTP.

The first one is like http-tunnel. The second one is the same but only seems to only allow KaZaa (or KLite, K++) traffic to go through it's little proxy.

Good luck!

insidious_machinae · 10-15-2003, 05:35 PM

Thanks a ton guys. I haven't tried either suggestion yet, but it sounds like there's possibility to resume my downloading days, and that's better than nothing.

Ganguro · 10-15-2003, 09:35 PM

just be prepared for the wrath when they see that there is a spike in usage in a dorm..
it's only a matter of time.

Seriously.. know your network user rights before you start fucking around. They DO have the right to terminate your service/kick you out of school if it's in the contract which you proally didnt read when signing up for service.

- a former Campus Tech

insidious_machinae · 10-16-2003, 02:10 PM

Good advice Ganguro. Luckily I am conscious of their rulebook for network access.

You see, I'd been doing some standard "let's see just how this network works" sort of stuff right when I moved in: port sniffing, tracerouts, etc. Then, my internet access stopped working. I was scared shitless that it was because of my actions, but it ended up being that I had a virus on my computer (Welchia---ick), anyway, it turned out that they DIDN'T catch me....that time. I'm sure if I do start messing with their network badly enough, they'll notice me.

By the way, Cliche and Latch, I haven't been able to get any of the things you guys suggested to work. Help!!

insidious_machinae · 10-16-2003, 04:40 PM

Hey guess what? I got the Bluetooth network working, at least!! Apparently I'd been trying to set the IP for the wrong network connection the whole time, when my friend (who owns the laptop, and thus would actually get to enjoy the advantages of the Bluetooth network) suggested that I try setting the IP info for the BlueToothNullConnection thing.

Anyway it worked. Wanted to let you guys know that.

Still can't download crap though.

10-15-2003, 12:23 PM	#1 (permalink)
insidious_machinae Psycho	Firewall Tunneling, proxy, etc. Hello everyone. This is my first post in Tilted Computers (I think). Anyway, I have a problem that I'm hoping some of you might be able to assist me with. I recently moved into a dorm at San Jose State University (California). Well, they have insanely tight security on the network, with a badass firewall that basically blocks all access to the Internet except normal web browsing, FTP, and instant messaging. The problem is that my friends and I can no longer use any of our favorite network games and programs (KaZaA, Quake 3, DC++, bitTorrent, etc.). So, I'd like to know if there's anyway I can somehow set up a proxy program on my computer to make these programs work. I have no access to the router, the firewall, or the main system in any way. One other thing: I recently bought an IOGear Bluetooth starter kit (2 wireless USB adapters). I cannot connect any computer to mine for Internet Connection Sharing because the ports we have in each room are limited to only a specific IP address per port. So, I can't even use a router. Any suggestions on how to get that working? Thanks for your time.

10-15-2003, 01:07 PM	#2 (permalink)
nukeu666 Junkie Location: India	i feel your pain im also in college with insane bandwidth witth EVERYTING blocked including FTP's i use http-tunnel but the bad news is that its going to become a paid service from the 19th kazaa can connect thru port 80 but its real slow... NO other p2p prog has run till now tho irc+DCC works(badly) with trillian+http-tunnel+sockscap sockscap catches all outgoing data from a program and sends it to a socks server(http-tunnel) tunnel works thry port 80 __________________ Why did the Comp. Engineer get X-mas and Halloween mixed up? Because Oct(31) == Dec(25)

10-15-2003, 01:43 PM	#3 (permalink)
cliche Rookie Location: Oxford, UK	You could tunnel things over port 80 to each other (for net games etc). Sadly not easy to contact outside computers on blocked ports unless you can persuade someone outside the firewall to take the port 80 packets and turn them back to whatever... As for ICS - you should be able to do things fine if you're not bridging - set the computer with the internet to run on the bluetooth network as 10.0.0.1, the slave computers as 10.0.0.x (from 2 to 254) with DNS 10.0.0.1 and gateway 10.0.0.1. The host computer will make the requests itself, using the one ip correctly allocated to it, and send things back over the bluetooth network using the 10.0.0.x address. So your college never sees the bluetooth network - it looks like just the one computer is making all the requests. __________________ I can't understand why people are frightened of new ideas. I'm frightened of the old ones. -- John Cage (1912 - 1992)

10-15-2003, 04:51 PM	#4 (permalink)
Latch In Your Dreams Location: City of Lights	2 programs I've used before are Socks2HTTP and KaZaaHTTP. The first one is like http-tunnel. The second one is the same but only seems to only allow KaZaa (or KLite, K++) traffic to go through it's little proxy. Good luck!

10-15-2003, 05:35 PM	#5 (permalink)
insidious_machinae Psycho	Thanks a ton guys. I haven't tried either suggestion yet, but it sounds like there's possibility to resume my downloading days, and that's better than nothing.

10-15-2003, 09:35 PM	#6 (permalink)
Ganguro Army of Me	just be prepared for the wrath when they see that there is a spike in usage in a dorm.. it's only a matter of time. Seriously.. know your network user rights before you start fucking around. They DO have the right to terminate your service/kick you out of school if it's in the contract which you proally didnt read when signing up for service. - a former Campus Tech

10-16-2003, 02:10 PM	#7 (permalink)
insidious_machinae Psycho	Good advice Ganguro. Luckily I am conscious of their rulebook for network access. You see, I'd been doing some standard "let's see just how this network works" sort of stuff right when I moved in: port sniffing, tracerouts, etc. Then, my internet access stopped working. I was scared shitless that it was because of my actions, but it ended up being that I had a virus on my computer (Welchia---ick), anyway, it turned out that they DIDN'T catch me....that time. I'm sure if I do start messing with their network badly enough, they'll notice me. By the way, Cliche and Latch, I haven't been able to get any of the things you guys suggested to work. Help!!

10-16-2003, 04:40 PM	#8 (permalink)
insidious_machinae Psycho	Hey guess what? I got the Bluetooth network working, at least!! Apparently I'd been trying to set the IP for the wrong network connection the whole time, when my friend (who owns the laptop, and thus would actually get to enjoy the advantages of the Bluetooth network) suggested that I try setting the IP info for the BlueToothNullConnection thing. Anyway it worked. Wanted to let you guys know that. Still can't download crap though.