[Ilugc] Re: [OT] IRC in IITM
- From: sriram@xxxxxxxxxxxxx (Prof. P. Sriram)
- Date: Thu May 11 16:43:52 2006
On Thu, 11 May 2006, R.Ramkumar wrote:
and the way to allow transparent tunneling of any service over a HTTP
proxy, is through CONNECT.
as i had indicated, the public proxies only support web browsing - nothing
else. if some other service works, good.
I guess you had replied yourself that only web browsing is allowed.
thats not what i said. it is not a question of allowing or not allowing
something. this is what i said in another post to the group.
"not having a proxy is not the same as blocked. ssh is certainly not
blocked - it is just that we only have a web browsing proxy for general
use and dont have nat; claiming ssh is blocked puts intent and motive to
the action which is not there. general machines have no access to outside
at all except for web browsing (and anything that can be made to appear
thus by tunnelling). all other services are provided on a need-to
case-by-case basis."
If the proxy doesn't allow tunneling by NAT/CONNECT/Socks equivalent,
the service then *is* blocked.
you may argue that not having a service is the same as blocked, but i dont
agree with that. the question is motive. for example, going by what is
there in the hostels, one might say that having phones (land line) in the
room is blocked. but it is not and was never the case. it was just that
the rooms were not individually wired for phones at all. if one wanted
(and was willing to pay appropriately), one could get a direct land line
connection to the room. whereas, if there was a policy to block, one would
not be able to get such a connection at all. now with institue giving
space for cell phone companies to set up towers, that service is enabled
and available to all. in a similar vein, i expect arbitrary services (not
just web browsing) to be similarly available sometime (dont know when). if
the intent were to really block, the firewall(s) would be programmed
appropriately and it would be quite painful to get around that, if at all.
--
sriram
Other related posts: