Proxy chaining or new method

[georgectr]

Hey everyone,

I'm at work and want to browse outside of what websense allows. I have been looking for a way to achieve this with some setups but none of them are good enough.

We have websense installed which censors most of the sites, I can't use some anonymous proxy because we are forced to use company proxy which goes through websense. So 1 way for me is to use some kind of proxy chaining which I haven't been able to do. Is proxy chain outdated, I remember using it 7-8 years ago seperating them with ";". It no longer works though.

http://www.linquist.net/geek/proxy
This site provides the details to setup proxy server easily however even if I did this I still wouldn't be able to use it because firefox/ie have to be configured to use company proxy.

I have a computer at home which can be used for browsing but I need an interface like ktunnels web site with a secure connection(https) otherwise websense can block those too. Help me if you know of any way preferably easy to use, setup and maintain.

Dont suggest any secure proxy web sites like https://proxify.com because they are also banned.

 

[twilyth]

find some free vpn software and install it on your computer at home. Use dyndns.org if you don't have a fixed ip address at home.

Unless the company's proxy is set up to detect vpn tunnels, you should be able to get through. Everything from your machine to the VPN server I believe is encrypted, so the company's proxy will just see a sting of encrypted nonsense.

I'm not a networking expert so don't take my word for this and check it out, but I think that's how it works.

 

[Deleted member 3]

If you can't use VPN you can try an SSH tunnel, that's how I get around everything at work.

 

[twilyth]

Something else that just occurred to me is that you can use dyndns.org to set up a forwarding domain. In other words, you type in my.domain.net (or whatever name you choose). This will be a dyndns domain so when it gets there, the dyndns server see what it's supposed to do with this request and see it is supposed to be forwarded to say anonymouse.com or some other proxy server.

Since dyndns.org has a variety of domain names for you to choose from it might not be blocked. But even if it is, you can spend a few bucks to register your own domain name which websense will never know about.

Just remember that registration and hosting are different. You can register a domain for next to nothing. It's the hosting that costs real money. And beware - many cheap registration services will require you to host it on their servers, so make sure that whoever you use to register doesn't impose this requirement.

 

[gumpty]

Probably wont work, but it did for me:

I just run Firefox off a U3 usb drive and it slides right past the Websense that blocks stuff on the IE that is installed on my work laptop.

This probably has more to do with how crap our IT department is than how sophisticated the method is.

 

[georgectr]

I probably cant use VPN but I'll give it a shot anyway, I'll update it if I can find a solution

 

[twilyth]

I probably cant use VPN but I'll give it a shot anyway, I'll update it if I can find a solution

I'd try the forwarding domain trick first. It's free if you can get away with a dyndns domain. If you have to register your own, it should only be $20-30. I think my annual renewal is only $15 but I pay about $140/yr for hosting.

It will certainly be a lot less work than setting up either VPN or SSH.

 

[georgectr]

After some more reading yesterday, I figured I could maybe use tor for browsing the web. I used it at home without any problems however now I'm at work and I get the following log. I think the warnings in red tell me that I cant use these unless I have necessary authorization from the network administrator which I'll never get.

Is this any different from the above scenarios? I think I'd get stuck at the same point so I didnt go through the trouble yet.

Tem 06 09:10:20.519 [Notice] Tor v0.2.1.30. This is experimental software. Do not rely on it for strong anonymity. (Running on Very recent version of Windows [major=6,minor=1] Service Pack 1 [workstation] {terminal services, single user})
Tem 06 09:10:20.519 [Notice] Initialized libevent version 2.0.10-stable using method win32. Good.
Tem 06 09:10:20.519 [Notice] Opening Socks listener on 127.0.0.1:9050
Tem 06 09:10:20.519 [Notice] Opening Control listener on 127.0.0.1:9051
Tem 06 09:10:20.519 [Notice] Parsing GEOIP file.
Tem 06 09:10:24.189 [Warning] The https proxy sent back an unexpected status code 403 ("Tunnel or SSL Forbidden"). Closing.
Tem 06 09:10:24.189 [Warning] The https proxy sent back an unexpected status code 407 ("Proxy Authorization Required"). Closing.

 

[caleb]

Interesting
@DTB What if it doesn't allow SSH to pass?