Re: Protection against http tunneling (was: HTTP tunnel with linux server and windows client)

2003-03-14 Thread Stefan Neufeind
I've worked for a firm where they limited http-connections to let's say 2MB per connection. So for stealing a lot of data you always had to open several connections. This was some kind of "protection" against tunnels and heavy downloads. Maybe this interruption would be of some use to prevent i

Re: Protection against http tunneling (was: HTTP tunnel with linux server and windows client)

2003-03-14 Thread Stefan Neufeind
I've worked for a firm where they limited http-connections to let's say 2MB per connection. So for stealing a lot of data you always had to open several connections. This was some kind of "protection" against tunnels and heavy downloads. Maybe this interruption would be of some use to prevent i

Re: Protection against http tunneling (was: HTTP tunnel with linux server and windows client)

2003-03-13 Thread Dale Amon
On Thu, Mar 13, 2003 at 05:52:48PM -0600, Jeff Hahn wrote: > "Never underestimate the bandwidth of a station wagon full of tapes." Or a single IBM magtape on a 707 ;-) -- -- IN MY NAME:Dale Amon, CEO/MD No Mushroom clouds o

RE: Protection against http tunneling (was: HTTP tunnel with linux server and windows client)

2003-03-13 Thread Jeff Hahn
> -Original Message- > From: Rich Puhek [mailto:[EMAIL PROTECTED] > > Reminds me of a rumor I heard that someone was working on an NFS over > SMTP gateway. Would have pretty crappy latency, but the point was to > prove that a firewall is not a guarrantee of security. > > Also worth consid

Re: Protection against http tunneling (was: HTTP tunnel with linux server and windows client)

2003-03-13 Thread Dale Amon
On Thu, Mar 13, 2003 at 05:52:48PM -0600, Jeff Hahn wrote: > "Never underestimate the bandwidth of a station wagon full of tapes." Or a single IBM magtape on a 707 ;-) -- -- IN MY NAME:Dale Amon, CEO/MD No Mushroom clouds o

Re: Protection against http tunneling (was: HTTP tunnel with linux server and windows client)

2003-03-13 Thread Rich Puhek
Vassilii Khachaturov wrote: The question is... is there any way to protect against this? I mean, how would you differenciate on for example, a squid, the traffic of one of this tunnels from the real traffic you want to allow? There is a way to protect any particular form of tunnelling (i.e., i

RE: Protection against http tunneling (was: HTTP tunnel with linux server and windows client)

2003-03-13 Thread Jeff Hahn
> -Original Message- > From: Rich Puhek [mailto:[EMAIL PROTECTED] > > Reminds me of a rumor I heard that someone was working on an NFS over > SMTP gateway. Would have pretty crappy latency, but the point was to > prove that a firewall is not a guarrantee of security. > > Also worth consid

Re: Protection against http tunneling (was: HTTP tunnel with linux server and windows client)

2003-03-13 Thread Vassilii Khachaturov
> The question is... is there any way to protect against this? I mean, how > would you differenciate on for example, a squid, the traffic of one of this > tunnels from the real traffic you want to allow? There is a way to protect any particular form of tunnelling (i.e., if you know that a particul

Protection against http tunneling (was: HTTP tunnel with linux server and windows client)

2003-03-13 Thread Santiago Garcia Mantinan
On Mar 03 2003, Martynas Domarkas wrote: > Try this: http://www.htthost.com/ , but use it on your own risk. It is a > real security hole. Better is to ask system administrator open some > rules on firewall for you. These kind of programs, if I read well we have at least corkscrew and httptunnel th

Re: Protection against http tunneling (was: HTTP tunnel with linux server and windows client)

2003-03-13 Thread Vassilii Khachaturov
> The question is... is there any way to protect against this? I mean, how > would you differenciate on for example, a squid, the traffic of one of this > tunnels from the real traffic you want to allow? There is a way to protect any particular form of tunnelling (i.e., if you know that a particul

Protection against http tunneling (was: HTTP tunnel with linux server and windows client)

2003-03-13 Thread Santiago Garcia Mantinan
On Mar 03 2003, Martynas Domarkas wrote: > Try this: http://www.htthost.com/ , but use it on your own risk. It is a > real security hole. Better is to ask system administrator open some > rules on firewall for you. These kind of programs, if I read well we have at least corkscrew and httptunnel th

Re: HTTP tunnel with linux server and windows client

2003-03-12 Thread enyc
> --- --{Inet} - > and win client after such proceess could work with any TCP/IP Services. > Some kind of pptp via http $-). Yes, debian includes "htc" "hts" programs in some kind of package(s) -- httptunnel programs... I expect you will find the 'htc' works on windoze under CYGWIN --

Re: HTTP tunnel with linux server and windows client

2003-03-12 Thread enyc
> --- --{Inet} - > and win client after such proceess could work with any TCP/IP Services. > Some kind of pptp via http $-). Yes, debian includes "htc" "hts" programs in some kind of package(s) -- httptunnel programs... I expect you will find the 'htc' works on windoze under CYGWIN --

Re: HTTP tunnel with linux server and windows client

2003-03-04 Thread GOTO Masanori
At Mon, 3 Mar 2003 18:30:05 +0300, Ant wrote: > Is there is any software to bypass http proxy > > --- --{Inet} - > > and win client after such proceess could work with any TCP/IP Services. > > Some kind of pptp via http $-). http://sourceforge.jp/projects/stone/ stone Description:

Re: HTTP tunnel with linux server and windows client

2003-03-04 Thread GOTO Masanori
At Mon, 3 Mar 2003 18:30:05 +0300, Ant wrote: > Is there is any software to bypass http proxy > > --- --{Inet} - > > and win client after such proceess could work with any TCP/IP Services. > > Some kind of pptp via http $-). http://sourceforge.jp/projects/stone/ stone Description:

Re: Re[2]: HTTP tunnel with linux server and windows client

2003-03-04 Thread Martynas Domarkas
We use following: user connects to firewall (kind of a commercial software firewall) using VPN client. And after authentication some firewall rules are applied. Session is encrypted. User can do some job on an internal network. PPTP is something like and free: http://project.terminus.sk/wmpptpd/

Re[2]: HTTP tunnel with linux server and windows client

2003-03-04 Thread Ant
Hello Martynas, Monday, March 3, 2003, 7:21:32 PM, you wrote: MD> Try this: http://www.htthost.com/ , but use it on your own risk. It is a Thanks, this could help me. MD> real security hole. Better is to ask system administrator open some I am a system administrator, and my users want to work wi

Re: Re[2]: HTTP tunnel with linux server and windows client

2003-03-04 Thread Martynas Domarkas
We use following: user connects to firewall (kind of a commercial software firewall) using VPN client. And after authentication some firewall rules are applied. Session is encrypted. User can do some job on an internal network. PPTP is something like and free: http://project.terminus.sk/wmpptpd/

Re[2]: HTTP tunnel with linux server and windows client

2003-03-03 Thread Ant
Hello Martynas, Monday, March 3, 2003, 7:21:32 PM, you wrote: MD> Try this: http://www.htthost.com/ , but use it on your own risk. It is a Thanks, this could help me. MD> real security hole. Better is to ask system administrator open some I am a system administrator, and my users want to work wi

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread Phillip Hofmeister
On Mon, 03 Mar 2003 at 06:30:05PM +0300, Ant wrote: > Hello , > Is there is any software to bypass http proxy I think a combination of squid, sshd, putty and a modification to your browsers proxy setting (to proxy through 127.0.0.1 on forwardedport) i what you are looking for. Port 22 not open/av

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread Martynas Domarkas
Try this: http://www.htthost.com/ , but use it on your own risk. It is a real security hole. Better is to ask system administrator open some rules on firewall for you. Regards, Martynas Pr, 2003-03-03 17:30, Ant rašė: > Hello , > Is there is any software to bypass http proxy > > --- --{

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread Kuba Jakubik
Is there is any software to bypass http proxy Some kind of pptp via http $-). try doing ppp-over-ssh you launch ppp on the first end, tunel it through ssh and launch another ppp on the other end. Afair mini/VPN-HOWTO is about this... BIGHard -- () ascii |GIT d--- s: a--- C UL P+ L+++ E--

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread Andrew Mulholland
hey there On Monday 03 March 2003 3:30 pm, Ant wrote: > Hello , > Is there is any software to bypass http proxy > > --- --{Inet} - > > and win client after such proceess could work with any TCP/IP Services. > > Some kind of pptp via http $-). > if the proxy allows ssl tunneling, then qu

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread robjeh
www.htthost.com Citeren Ant <[EMAIL PROTECTED]>: > Hello , > Is there is any software to bypass http proxy > > --- --{Inet} - > > and win client after such proceess could work with any TCP/IP Services. > > Some kind of pptp via http $-). > > > Best regards, > Ant

HTTP tunnel with linux server and windows client

2003-03-03 Thread Ant
Hello , Is there is any software to bypass http proxy --- --{Inet} - and win client after such proceess could work with any TCP/IP Services. Some kind of pptp via http $-). Best regards, Antmailto:[EMAIL PROTECTED]

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread Phillip Hofmeister
On Mon, 03 Mar 2003 at 06:30:05PM +0300, Ant wrote: > Hello , > Is there is any software to bypass http proxy I think a combination of squid, sshd, putty and a modification to your browsers proxy setting (to proxy through 127.0.0.1 on forwardedport) i what you are looking for. Port 22 not open/av

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread Martynas Domarkas
Try this: http://www.htthost.com/ , but use it on your own risk. It is a real security hole. Better is to ask system administrator open some rules on firewall for you. Regards, Martynas Pr, 2003-03-03 17:30, Ant rašė: > Hello , > Is there is any software to bypass http proxy > > --- --{

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread Kuba Jakubik
Is there is any software to bypass http proxy Some kind of pptp via http $-). try doing ppp-over-ssh you launch ppp on the first end, tunel it through ssh and launch another ppp on the other end. Afair mini/VPN-HOWTO is about this... BIGHard -- () ascii |GIT d--- s: a--- C UL P+ L+++ E--- W

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread Andrew Mulholland
hey there On Monday 03 March 2003 3:30 pm, Ant wrote: > Hello , > Is there is any software to bypass http proxy > > --- --{Inet} - > > and win client after such proceess could work with any TCP/IP Services. > > Some kind of pptp via http $-). > if the proxy allows ssl tunneling, then qu

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread robjeh
www.htthost.com Citeren Ant <[EMAIL PROTECTED]>: > Hello , > Is there is any software to bypass http proxy > > --- --{Inet} - > > and win client after such proceess could work with any TCP/IP Services. > > Some kind of pptp via http $-). > > > Best regards, > Ant

HTTP tunnel with linux server and windows client

2003-03-03 Thread Ant
Hello , Is there is any software to bypass http proxy --- --{Inet} - and win client after such proceess could work with any TCP/IP Services. Some kind of pptp via http $-). Best regards, Antmailto:[EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PR