Re: [OFFTOPIC, yet related :)] Port access

From: Jourge Fuzz Bush (modem-burn@GEOCITIES.COM)
Date: 10/31/98


This maybe a dumb thought but from what I think, isn't there a way of
setting a program to certain fire wall settings then the fire wall don't
block you transmissions?
Kinda like icq.

Brian 'Astrolox' Wojtczak wrote:
>
> Ok, this is simple.  Basically there is no way round it without messing
> about with your firewall.  Hopefully you will understand more with a diagram.
>
>            +-------+    +--------+
>            | Fire  |    | School |--- Internal
> Internet --|  wall |----|  Hub   |--- School
>            |       |    |        |--- Network PCs
>            +-------+    +--------+
>
> I've assumed your network is using a Hub, as a 'ring' network would be a
> bit foolish in a school, but it only really matters if you want the diagram
> to be correct.  The problem is that all the PCs on your school network have
> one network connection and the Firewall has two.  That is your firewall can
> access the internet and the internal network.  It can, if it wishes, allow
> any computer on the internal network to talk to computers on the external
> network by relaying messages.  However it is much simpiler for it to just
> ignore them, in which case they go no where.  The system could also be set
> up to ignore messages for certian places and let messages for other places
> through - hence the ability to block certian ports.
>
> As you meantioned a proxy what I have said above, although true and
> possible, is proberbly not what is happening.  That is your firewall is not
> passing on messages AT ALL.  In fact I think you'll find that all the
> computers are told to use the proxy server ( a program stored and running
> on the firewall computer ).  The job of the proxy server is to sit there
> saying "Who do you want to talk to and What do you want to say?" and then
> saying to the other person "I'm a proxy, thingie wants to say ....".  To
> put it bluntly - if anyone wants to correct me, please don't - i'm just
> trying to make things simple to understand.
>
> Anyways, thats how to do it.  You either have a 'gateway|firewall' as in my
> first example; which restricts ports or cirtian messages/connections, or
> you have a 'proxy|firewall' as in my my second example; which restricts
> everything and acts as a go between for authorized traffic.
>
> You'll find more information on proxys and firewalls in the RFCs.
>
> GTG... Astrolox
>
> Sometime in the past, Jodi Goddard <jodig@SPRINT.CA> wrote:
> >Ok, here's the deal.
> >
> >I try to get on MUDs from my school network, so I can do some development
> >from school when things get extremly boring :]
> >
> >HOWEVER, the loosers who run the network put Port access restrictions, and
> >you can't connect to port 110 (POP mail, but I don't really care about
> >that) and any port higher than 1024 (I think they are on to our secret! :] )
> >
> >I would also be interested in knowing HOW they do this *grin*
> >
> >Does anyone know a way around this; I tried Java Telnet app's as well as
> >the Win Telnet.
> >
> >This is what I know of the network:
> >        Windows NT (version ?)
> >        A proxy server
> >        Not sure of what kind of connection, but it usually transfers at
> >57.6Kbytes (not bits)/s (What ever kind of line that is, I'm not sure)
> >
>
> --
>
> Brian 'Astrolox' Wojtczak, astrolox@innocent.com
>
> "Assassination is the extreme form of censorship"
>  George Bernard Shaw (1856-1950)
>
>      +------------------------------------------------------------+
>      | Ensure that you have read the CircleMUD Mailing List FAQ:  |
>      | http://democracy.queensu.ca/~fletcher/Circle/list-faq.html |
>      +------------------------------------------------------------+


     +------------------------------------------------------------+
     | Ensure that you have read the CircleMUD Mailing List FAQ:  |
     | http://democracy.queensu.ca/~fletcher/Circle/list-faq.html |
     +------------------------------------------------------------+



This archive was generated by hypermail 2b30 : 12/15/00 PST