7 ms·
Sounds like they enabled HTTP CONNECT without limiting the accepted port range, so any protocol will go through. Maybe this is why Microsoft Azure never allowe
by Laforet 11y ago
Sounds like they enabled HTTP CONNECT without limiting the accepted port range, so any protocol will go through.
Maybe this is why Microsoft Azure never allowed ICMP travseral through their outer firewall despite frequent request from users....
- motoboi 11y agoIt's common to run OpenVPN on TCP port 443 (HTTPS) to avoid such restrictions. The Great China Firewall and others need deep packet inspection, heuristics and AI to find tunnels set up that way.
- andrewchambers 11y agoBlocking based on port is a silly thing. He probably just ran ssh on port 443 to get around it.
- Laforet 11y agoThat's another possibility, the comment above can be interpreted either way. In any case they were probably running something like squid with very basic level 7 filtering, so if something comes on 443 they have no option but to forward it.
- vesinisa 11y agoI think they allowed HTTP CONNECT to any port. Not that it would have been hard to move OpenVPN or SSH to a different port.