PDA

View Full Version : Workaround for 8e6 R3000 pattern-based filtering


Ranguvar
8th September 2008, 17:10
I wasn't sure whether this discussion would be fine here, but I read and re-read the rules and can't really find anything about this, so I'll give it a shot.

My school is now using the 8e6 R3000 Enterprise network filtering software. The bane of my existence. Previously, blacklists were how the filters worked, which could easily be circumvented by using unknown HTTP proxies, or VNC/proxy to my home PC.

Now, they employ filtering based on patterns. Info here (http://www.8e6.com/industry/education/proxy-pattern-v5r5-release.html), here (http://www.8e6.com/press-releases/enterprise/8e6-technologies-adds-blocking-capabilities-for-non-browser-applications.html), and here (http://www.business-concepts.co.uk/internet_filtering_8e6/8e6_proxyblocker.htm) (Google can find more).

I'm wondering if anyone has any ideas about getting around this. I don't know what I'd do if the Doom9 forum got blocked :p

I am quite noobish to advanced networking, but I can learn.

Thanks, and I hope this discussion is considered OK - I think it will, considering that it doesn't even break the law, which is grey area for a ton of other stuff on this forum :p

I would rather not use any workarounds that require social engineering, or any sort of intrusive hacks... it wouldn't be worth it. This is mostly just so I can surf freely, and for the challenge. I'm not malicious.

Adub
8th September 2008, 17:52
ssh tunnel to your home computer.

Sharktooth
8th September 2008, 21:00
or any encrypted connection (even VPN...) to your home computer and a gateway/proxy...

LoRd_MuldeR
8th September 2008, 21:12
Maybe http://pici.picidae.net/ could help you. AFAIK it even breaks the Great Chinese Firewall :)

It works by only transferring images instead of Text/HTML code. All URL's will be obfuscated. It seems the Doom9 forum works, not too great though...

Sharktooth
8th September 2008, 21:17
fantastic :)

Ranguvar
8th September 2008, 22:58
Maybe http://pici.picidae.net/ could help you. AFAIK it even breaks the Great Chinese Firewall :)

It works by only transferring images instead of Text/HTML code. All URL's will be obfuscated. It seems the Doom9 forum works, not too great though...

Unfortunately, the site is blocked. Besides that, I think they may detect the obfuscated URL; they did that before.

I'm also worried about a VPN or SSH connection, but I'll try it.

Thanks!

LoRd_MuldeR
8th September 2008, 23:06
Unfortunately, the site is blocked. Besides that, I think they may detect the obfuscated URL; they did that before.

Even if the original site got blocked, other servers may arise. The software is available for free, any PHP capable server can run it.

If they manage to detect the obfuscated URL's, then the obfuscation mechanism can be changed. Yes, it's the usual "cat and mouse" game ...

Ranguvar
9th September 2008, 04:22
Does anyone have a good guide for setting up a free VPN proxy to my home computer? Windows. Looked around, but all I can find are pay-for services, and Linux tutorials.

LoRd_MuldeR
9th September 2008, 04:56
Not sure if this is what you need, but you may want to give Hamachi (https://secure.logmein.com/home.asp) a try. Very easy to use...

Ranguvar
9th September 2008, 16:54
Unfortunately, Hamachi cannot install without admin rights. I'll try installing on my home PC and copying the files, but if that doesn't work, I'll need to find a new admin hack, as they fixed all the old ones... I find it funny that if I had never been around, they would actually have worse security :p I always find holes and then they patch them (won't discuss exactly because I don't want to worry the mods).

LoRd_MuldeR
9th September 2008, 19:06
Hamachi needs to install it's own Network Adapter (Network Driver). It think the same applies to all VPN solution. So Admin rights will be needed to get VPN working...

Ranguvar
10th September 2008, 05:29
I think I found a new way in.... muhahaha ;)

Now to see if the way in, and then Hamachi, will work.

Shinigami-Sama
10th September 2008, 10:32
try firefox with tor and/foxyproxy or installed/built in?
theres a couple floating around
and even if its on executible blacklist, you can always compile it with couple differences...

Ranguvar
10th September 2008, 12:15
Neither work because of the pattern blocking. Tried it already. But thanks.