113eb9c7   
   From: philip+usenet@paeps.cx   
      
   Vecu BOSSEUR  wrote:   
   > When I connect to the Internet, there are many things I cannot do   
   > because of very many blocked ports, in examples :   
   >    * Fetching files through FTP   
   >    * Synchonizing Data   
   >    * Synchonizing Clocks   
   >    * and so on ...   
   >   
   > So, I need some kind of proxy to bypass those stupid restrictions.   
      
   Sounds like you just need to rent a VPS somewhere (or put a pizza in a colo   
   centre) to tunnel through.   
      
   > Where I am, I can only initiate outbound TCP connexions to the   
   > following (remote) ports :   
   >     * HTTP 80, 8080   
   >     * HTTPS 443   
   >     * MAIL 25, 110, 143, 220   
   >     * IPSEC 50, 51   
   >     * SSH 22   
      
   That's not very restrictive.  The OpenSSH ssh client has a -D option which   
   will set it up as a SOCKS proxy, which will take care of 90% of your TCP   
   tunneling needs.  You can also run PPP over SSH, which will take care of 100%   
   of your needs.   
      
   > And I can, maybe, have UDP connexions on the following ports :   
   >    * SIP 5060   
   >    * IPSEC 500   
   >   
   > I would like you to tell me if you managed to choose and use a good   
   > (paid) proxy suitable for my case.   
   >   
   > And I would like you to tell me a bit about configuration concerns   
   > under Linux.   
      
   Of course, you need full control over your client.  If you are stuck on a   
   Microsoft Windows host, there is not much you can do, unless you can social   
   engineer IT into letting you run VMWare (or some such) or (failing that) a   
   rootkit which sounds plausible and doesn't appear in "antivirus" lists.   
      
   Good luck.   
      
   Escaping from others' well-meaning but draconian networks is a sport all   
   network professionals must learn to enjoy. ;-)   
      
   Unfortunately, the more creative means of escaping from the more cluefully   
   locked down networks are not always suitable for publication.  Feind Hört Mit!   
      
   If you can get HTTPS and SSH out though, there should be no problem.   
      
    - Philip   
      
   --   
   Philip Paeps                                    Please don't email any replies   
   philip@paeps.cx                                     I follow the newsgroup.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)