how can hide to a firewall?

[nihil]

I cannot fault that RoadClosed; Democracy is paramount, and many of us do take it for granted, rather than seriously......

What is troubling me, is the apparently increasing numbers of posts like this............are they that far from "how do I hack my girlfriend's hotmail account"?............from a security forum's viewpoint? OK the e-mail account is an invasion of personal privacy, but tunneling through/hacking your institution's internet security and compromising the whole site security, for purely personal and TOTALLY indefensible reasons cannot be justified? (I do not regard SELFISH access to kaazaa, or web chat as conducive to Democracy in a repressed regime................the secret police will have you in 5 minutes, if they stop off for a beer on the way )

What really concerns me is that younger people are obviously joining a shared environment, where resources are scarce and expensive; or have just started a job...........and think that they ought to be able to behave just like they did at home with mommy and daddy?

I am concerned about what a few moments of selfish stupidity might do to their career, or the prospect of ever getting to have one.

Thanks for your support as to what tools Sysadmins have.........I am slightly restricted in what I am allowed to say

Maybe I should try a social engineering approach: THESE ARE GENERAL COMMENTS!

If you are a young employee or student you are not really contributing very much to the institution. Your site has an IT/IS support Manager and a team of system administrators. They have wives, children, car loans and so on to support? You make fools out of them and they are in fear of their jobs...............and you weren't cool.............YOU CAME CRAWLING TO AO or wherever, because you are too lame to do it yourself So do not try to say that "they were no good anyway"............better no good than plain bloody useless IMHO

If you take a person in that position, having put their livelihood under threat, how do you expect them to react..............not like mommy and daddy who will ground you for a week..............they will bury you forever, given the chance................corner an animal and it will BITE.

So you get fired..............going to get good job references from your former employer? Get thrown out of school..........it will be on the records for the rest of your life...............not a good start to a promising career.

I have no objection to people having fun, but self-centered, ignorant people who care about no-one but themselves, really piss me off. I hope that you get all that you deserve............Democracy is not one of those things............Democracy is a team effort.


OK soapbox mode off

If this has helped one person from ruining their careers It will have been worthwhile?

Cheers

[thehorse13]

I think nihil is assuming, (which more than likely he is correct) that this person is one of the many people who show up here asking for advice on how to circumvent current controls that are in place at various organizations. I know that "crafty" end users are always looking for ways to defeat our security. To date, all have been caught and released. I stand behind his statement.

--TH13

[nihil]

I was assuming as TH13 correctly spotted

S3cur|ty4ng31 .....................I am guessing that the person is a student, because the request was specifically about kaazaa?..................also " how do I hide from a firewall"..........OK I modified the English.

If you are sysadmin or have those rights (like you OWN the machine), you turn it off or configure it to allow what you want. This was not the question, and no specific FW app was mentioned?...............the question was almost certainly about circumvention?

Or maybe I am just a little paranoid these days?

BTW I have not flamed or negged him.................just given some sound advice I hope? ...and to others?

We have a saying over here that the eleventh commandment is "Thou shalt not get found out"

Cheers

[thehorse13]

You posted exactly what I would have if I saw the post first. Like I mentioned, this site gets a ton of people who post questions asking for advice or techniques for circumventing security controls. Notice that the orignal poster has not responded in a meaningful way.

To the others who have not been here long, soon your reactions will fall in line with Nihil's. All it takes is reading enough posts and soon you'll be able to see through the BS too.

--TH13

[r04dki11]

I think entirely too much has been based solely off assumptions on the first post. We don't know what network (if any) he or she is working with/around. Is this their personal system with a software firewall and they just want to know how to allow kazaa through their own firewall on their own system.

It sounds to me that there are some very knowledgeable and seasoned sysadms reading this thread. Truth is, you didnt get this far by leaping to conclusions - why start now?

[jetherson]

talk to the sysadmin then ask for permission.

if he did not accept your request and you really, really need to load some p2p app, then ask the boss.

if they wont permit you, think why they wont let you.

[S3cur|ty4ng31]

I think I have to agree with r04dki11 here that too much is being assumed. He could be completely computer illiterate(grammatical illiteracy has already been proven from post ) and is just trying to set up a p2p program I do not use kazaa but I find edonkey to be a great source of ebooks and white papers and I have to configure my router or I get a "lowid/firewal problem".

Also I dont see what is so wrong in tying to learn how to circumvent security measures here. Granted that some people may be coming here to exploit certain targets and maybe you should you judgement but when I did research on my masters I posted in forums all the time to learn how certain exploits worked and I would practice them in my own testbed. I still research security flaws and implement them in a test enviroment,amongst a group of colleagues, and at hacktest websites.

If this person is trying to do what is being implied then he will be caught if there are any security measures in palce and he will get what he deserves.

[ascii]

sorry guys... i just like to have a freedom to surf the internet without filtering some sites...
nihil tnx...

[The3ntropy]

From a rather brite new member here at AO posted here

They aren't your computers, it isn't your network; computer usage is a privilege not a right.

There is a reason why the sysadmin(s) disabled kazaa and other applications.

[r8devil]

I know this is a little off topic but since its been mentioned, I would like to know how does one block or detect anyone that is using http tunneling.

Say i have configured my network with a firewall but port 80 is open to allow http access for users in the network. and someone is using http tunneling to run say Kazaa. How do i stop this or find out who is doing it to stop them. Although most people wouldnt be doing this, there might be some out there who do and this will compormise the network and also raise legal issues if the RIAA goes after them and since they are using the companys network, this might result in the company being sued.