RE: Socks Tunnel over SSH

["David Gillett" <gillettdavid () fhda edu>]

What you want is called a VPN.  Note that some ISPs consider VPN use to be
"business class" and so may not permit it at all of their service levels.

If your needs routinely violate the service policies of your ISP, they would
appear to be a poor fit and you should probably be looking for one that
better meets your needs.  Simply attempting to evade their existing policy
enforcement mechanisms just helps build their case for adopting stricter
measures.

David Gillett, CISSP

-----Original Message-----
From: Shreyas Zare [mailto:shreyas () secfence com]
Sent: Wednesday, June 23, 2010 09:00
To: Arnold Bush
Cc: security-basics
Subject: Re: Socks Tunnel over SSH

On Wed, Jun 23, 2010 at 6:27 PM, Arnold Bush <arnoldwbush () gmail com> wrote:
> Hi all
> I'll be honest of my intentions upfront. My ISP doesn't allow me to do
> P2P downloads. Furthermore, there are some websites (including those
> providing legitimate data) that are not reachable from my ISP. I am
> looking for a host that would allow me to create an HTTP tunnel over
> SSH. This tunnel would keep my traffic somewhat hidden from my ISP's
> eyes, right? I doubt if they have even average capability admins with
> sufficient time to bother looking into individual encrypted tunnels.
>
> To terminate that SSH tunnel, I am seeking someone who has an
> unlimited download account with their ISP and my described usage
> either falls within their acceptable usage policy or they don't care.
> I think this is better than hopping between free shell providers out
> there violating each one's usage policy one after the other. Any
> information on people willing to share volunteer bandwidth?
>
> Best regards
> Arnold

Hi,

I don't know if you have considered the option to get a VPN service.
You can get a VPN service very easily, there are many providers which offer
OpenVPN and some even give basic service for free which can be used for
basic browsing needs. For heavy usage you will have to pay to get reliable
service though but it would be a good solution to the issue.

Regards,

Shreyas Zare

Sr. Information Security Researcher
Secfence Technologies
www.secfence.com

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we
examine the importance of Apache-SSL and who needs an SSL certificate.  We
look at how SSL works, how it benefits your company and how your customers
can tell if a site is secure. You will find out how to test, purchase,
install and use a thawte Digital Certificate on your Apache web server.
Throughout, best practices for set-up are highlighted to help you ensure
efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------