RE: Head's Up Your Network Admins...

[Paul Cowan <pwc21@xxxxxxxxx>]

I think you're right, a smart firewall like that would pick up on it and
block.  So what about if you change SSH to run on port 443 instead of 80...
Like the page says now.  ;)

http://www.buzzsurf.com/surfatwork/

> Hi Mike -

> > 22, but they are having you change it to 80. So just blocking 
> > that port
> > won't work. You I believe you have to filter the packets?

> I don't know what they use on our internet gateway, but I do know 
> that if it doesn't like what it sees on port 80, it blocks it. I 
> found this out when using telnet on port 80 to emulate a browser so 
> I could see the raw data coming back to diagnose a problem. 
> Forgetting to put in any little thing, even if a webserver would 
> have accepted the request, caused the firewall to issue an error 
> message and drop the connection.

> So I really doubt that SSH on port 80 or IRC on port 80 or any of 
> that kind of underhanded stuff would get through. The people who code 
> the high-end enterprise firewalls aren't stupid.

> Ken
> http://www.ke9nr.net/
> Opinions expressed are my own and do not necessarily represent the 
> views of my employer or anyone in their right mind.