[107979] in Cypherpunks
Re: Penetrating Corporate Firewall.
daemon@ATHENA.MIT.EDU (Bill Stewart)
Sat Jan 30 19:41:56 1999
Date: Sat, 30 Jan 1999 16:31:25 -0800
To: cypherpunks@cyberpass.net
From: Bill Stewart <bill.stewart@pobox.com>
In-Reply-To: <199901281547.QAA32166@replay.com>
Reply-To: Bill Stewart <bill.stewart@pobox.com>
Some disgruntled but highly paid employee of a Swedish company ranted:
>they have set up a firewall that is so restrictive
>that i can only use http protocol on port 80. even
>https is denied! what i need/want to do is to access
>one of my UNIX shell accounts from work, so i can do
>shit like check mail, etc...
Well, you've got four basic machines to work on:
- your desktop - presumably Unix/Win9x/Mac - controllable
- your firewall - passes port 80 outbound, otherwise useless
- your Unix shell account - the key to fixing your problems
- the outside world - other services you can use.
Having the Unix shell account in the outside world means you can
build tools to fix problems, especially if you can do web cgi scripts.
If all you're trying to do is read your home email from work, that's easy;
set a procmail filter to forward the interesting stuff to a
web-based email portal, such as hotmail, and access that,
(clean the stuff up periodically to prevent overflow...)
If you can do cgi scripts, you can run it on your own machine,
which is cleaner and more secure.
Be sure to use some kind of security mechanism...
Thanks!
Bill
Bill Stewart, bill.stewart@pobox.com
PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639
