Re: AW: Firewall workaround

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On January 16, 2004 01:44 pm, bmcdowell@xxxxxxxxxxxxxxxxxx wrote:
> And of course, people by-pass firewalls for a reason too.  Clearly the user
> here feels the firewall is too restrictive.
>
> It's a lot like passwords.  If they're complex enough to be secure, people
> use post-it notes.
>
> The real question is whether or not the user has the authority to by-pass
> it and whether or not the firewall admin has the authority to be so
> restrictive in the first place.
>
>
> Bob
>
> -----Original Message-----
> From: netfilter-admin@xxxxxxxxxxxxxxxxxxx
> [mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx]On Behalf Of Tim Evans
> Sent: Friday, January 16, 2004 12:24 PM
> To: netfilter@xxxxxxxxxxxxxxxxxxx
> Subject: Re: AW: Firewall workaround
>
>
> On Fri, 16 Jan 2004 18:10:29 +0000, Antony Stone wrote
>
> > I thought you meant you wanted to bypass the firewall filtering and
> > access some (specific) machines using protocols which were being
> > blocked, but if you want to have a more general routing solution
> > then I agree that a VPN is the way to go.
>
> And you do, of course, mean to observe your organization's Internet
> security policies, right?  Organizations put firewalls in place for a
> reason.
>
> --
> Tim Evans, TKEvans.com, Inc.    |    5 Chestnut Court
> tkevans@xxxxxxxxxxx             |    Owings Mills, MD 21117
> http://www.tkevans.com/         |    443-394-3864
> http://www.come-here.com/News/  |



	Ethics aside, if the firewall is allowing SSH out, get yourself something like 
	exceed, or vnc and forward your desktop throught the ssh tunnel from the other
	box and run relevant applications from the other box.  At least in this manner you 
	minimize the affect of applications running inside the firewall protected network 
	since the application is actually running outside it.

	*cough* 
	Not that I'd know anything about that from my workplace
	*cough*

	Alistair.


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux