RE: [MLUG] Getting SSH around despotic firewalls

[F Vernon Green <EMAIL:PROTECTED>]

I work at the Santa Paula School District here in California. The blocking
is a result of the Federal Children Internet Protection Act. It basically
says that all internet traffic, both web and e-mail has to be filtered for
content. You are not going to get the school board to change their stand on
it, since it was not their policy to implement it, they have to implement it
in order to qualify for Federal funding.

Incidently we had to do it here too, what we ended up doing was using an
IPrism that runs on FreeBSD. A company that sells the filters and the
service to keep up with all the web content are the ones that actually do
the blocking. The administrator can also open up whatever sites they want.
Iprism will re-evaluate sites according to their content, I found it
interesting that EVERY online dictionary is blocked.

E-mail is filtered too. We do not offer e-mail to students at our district,
but any school that does has to by law filter all e-mail according to words
in the heading and body of the e-mail.

Bottom line is that unless you have some stupid administrators at your
district that are going to allow you to bypass all their protections,
anything you want to do at school is going to be filtered and or read by
someone else.

F Vernon Green

-----Original Message-----
From: EMAIL:PROTECTED
[mailto:EMAIL:PROTECTED]On Behalf Of Igor Izyumin Jr.
Sent: Wednesday, February 13, 2002 6:44 PM
To: EMAIL:PROTECTED
Subject: Re: [MLUG] Getting SSH around despotic firewalls


On Wednesday 13 February 2002 20:13, Ian Monroe wrote:
> At Rock Bridge HS, the new filtering program/firewall started bannning all
> ports except 80. This is a problem, as it is handy being able to SSH into
> mlug.missouri.edu to check my mail.
Yep, this is now district-wide.  Those bastards even blocked our web
server -
kewp.columbia.k12.mo.us - so the Hickman website is now offline.  We'll have
to call those morons to figure out what the hell they were thinking.
And actually, the filtering program is incredibly easy to bypass for anyone
with some brains.  I will probably set up a PHP proxy on MLUG so that I can
look at fuckedcompany.com from school.

> One solution to this would be to power on my computer at home with SSH
> listening to port 80 (and from there I could SSH anywhere), but that would
> be a hassle. Is there an easier way?
I have the same question.  I know you can set up an HTTP tunnel - is it
possible to run a VPN through one?  I have a Linux box I could hook up as a
router - is it possible to make it connect to my LAN at home over an HTTP
tunnel?  Most of the stuff I've seen seems to run off of a web proxy, which
is non-existent (they just block everything outgoing except 80, 443).
Suggestions?

By the way, Ian, I think it would be best to send an email to the school
board.  This kind of crap really pisses me off, especially since perfectly
legitimate resources are being blocked (not to mention our website).
--
-- Igor
--
To unsubscribe, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/


--
To unsubscribe, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/