4 ms·

Do be careful doing this, if your company cares, a competent network admin can tell what's going on.

shawnz 6y ago
You can defeat deep packet inspection by tunneling it over an HTTPS proxy, using the SSH ProxyCommand option and the proxytunnel utility
- varenc 6y ago
  A corporate IT admin would probably detect this by pulling information directly from the company managed machines. i.e. osquery https://www.metalliccode.com/detecting-ssh-tunnels https://www.metalliccode.com/detecting-ssh-tunnels
- yownie 6y ago
  or just sshuttle
  - shawnz 6y ago
    Sshuttle solves a different problem. It uses SSH as a transport so it could not bypass a firewall that blocks outgoing SSH.
- LilBytes 6y ago
  We had a sys. admin who did exactly this to access his home computer to play World of Tanks. :) He still works there in a Government Agency riddled with staff who are perfectly adapt at doing enough to stay hired and doing little enough to describe their job as a paid hobby.
- Jedd 6y ago
  I worked for an organisation that decided to stop outbound SSH for reasons that weren't adequately well explained, exceptions were painful to get re-applied, so most people just cranked up corkscrew and did precisely this. Only challenge is that getting corkscrew compiled on Windows is a massive pain. [n] https://github.com/bryanpkc/corkscrew https://github.com/bryanpkc/corkscrew
  - kazinator 6y ago
    The core API's of Windows are so stable that if someone got it working once on WIndows NT, the executable should work for everyone on Windows 2000, Windows XP, Windows Vista, Windows 7, 8 and 10, ...
    - Jedd 6y ago
      Yup - one of my smarter colleagues had a go at getting it compiled on Windows, and basically gave it up as the library dependencies were such a mess on that platform. No one seems to have packaged up binaries for it either.
      - mycall 6y ago
        > Win32 (with Cygwin) Is that good enough support?
        Jedd 6y ago
        Are you saying that's an environment in which you can compile it? We tried. MinGW refers to headers from BSD sockets, which doesn't exist on windows.
- saagarjha 6y ago
  Trying to defeat measures that your corporate IT department has put up sounds like an excellent way to be terminated.

You can defeat deep packet inspection by tunneling it over an HTTPS proxy, using the SSH ProxyCommand option and the proxytunnel utility

varenc 6y ago
A corporate IT admin would probably detect this by pulling information directly from the company managed machines. i.e. osquery https://www.metalliccode.com/detecting-ssh-tunnels https://www.metalliccode.com/detecting-ssh-tunnels
yownie 6y ago
or just sshuttle
- shawnz 6y ago
  Sshuttle solves a different problem. It uses SSH as a transport so it could not bypass a firewall that blocks outgoing SSH.
LilBytes 6y ago
We had a sys. admin who did exactly this to access his home computer to play World of Tanks. :) He still works there in a Government Agency riddled with staff who are perfectly adapt at doing enough to stay hired and doing little enough to describe their job as a paid hobby.
Jedd 6y ago
I worked for an organisation that decided to stop outbound SSH for reasons that weren't adequately well explained, exceptions were painful to get re-applied, so most people just cranked up corkscrew and did precisely this. Only challenge is that getting corkscrew compiled on Windows is a massive pain. [n] https://github.com/bryanpkc/corkscrew https://github.com/bryanpkc/corkscrew
- kazinator 6y ago
  The core API's of Windows are so stable that if someone got it working once on WIndows NT, the executable should work for everyone on Windows 2000, Windows XP, Windows Vista, Windows 7, 8 and 10, ...
  - Jedd 6y ago
    Yup - one of my smarter colleagues had a go at getting it compiled on Windows, and basically gave it up as the library dependencies were such a mess on that platform. No one seems to have packaged up binaries for it either.
    - mycall 6y ago
      > Win32 (with Cygwin) Is that good enough support?
      - Jedd 6y ago
        Are you saying that's an environment in which you can compile it? We tried. MinGW refers to headers from BSD sockets, which doesn't exist on windows.
saagarjha 6y ago
Trying to defeat measures that your corporate IT department has put up sounds like an excellent way to be terminated.