You are not logged in.

#1 2014-01-30 08:03:55

ShionjiYuuko
Member
Registered: 2011-07-31
Posts: 64

DNS Website Filtering

My campus use DNS filtering service to prevent access to NSFW/gambling and other banned sites. Previously I could bypass them using Google DNS with mobile connection (the firewall redirects all DNS traffic to local server) but now it does not work anymore.

Although I get correct IP address from Google DNS, the 'website' I'm accessing returns 302 and redirects me to a landing page of the filtering service.

# wget nicovideo.jp 
--2014-01-22 14:51:18-- http://nicovideo.jp/
Resolving nicovideo.jp (nicovideo.jp)... 202.248.110.243
Connecting to nicovideo.jp (nicovideo.jp)|202.248.110.243|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://block.nawala.org/?24b5bacb240be71ce0843ec1 [following]   # hijacked!!
--2014-01-22 14:51:19-- http://block.nawala.org/?24b5bacb240be71ce0843ec1
Resolving block.nawala.org (block.nawala.org)... 180.131.146.10
Connecting to block.nawala.org (block.nawala.org)|180.131.146.10|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5763 (5.6K) [text/html]
Saving to: ‘index.html’

I'm interested with this potent website filtering. Any idea how to set this up? I might need it later, or maybe I can find a workaround for this blocking. Thanks smile


始まりの荒野を独り もう歩き出してるらしい、僕は灰になるまで僕で有り続けたい
http://about.me/nnhnkn | http://identi.ca/nnhzkn

Offline

#2 2014-01-30 09:44:32

brebs
Member
Registered: 2007-04-03
Posts: 3,469

Re: DNS Website Filtering

Probably have to go through a different connection:

"man ssh" - look at the "-D" option:

Specifies a local “dynamic” application-level port forwarding.

Example:

ssh -p sshport -C2qTnN -D httpport myusername@myserver.com

Then can use with e.g. privoxy, in /etc/privoxy/config:

forward-socks5 / 127.0.0.1:8080

... If 8080 is what you used for httpport, for example.

Offline

#3 2014-01-30 09:52:04

fukawi2
Forum Moderator
From: .vic.au
Registered: 2007-09-28
Posts: 5,326
Website

Re: DNS Website Filtering

At a guess, they could be IP hijacking. Only a guess.

*mod hat on*

ShionjiYuuko wrote:

or maybe I can find a workaround for this blocking.

This isn't something we condone on the forums -- you are being provided the service as part of your educational curriculum, and use it subject to the terms and conditions of those providing it. Obviously those terms and conditions include it being filtered for what they deem to be questionable and/or objectionable content.

Offline

#4 2014-01-30 10:03:38

ShionjiYuuko
Member
Registered: 2011-07-31
Posts: 64

Re: DNS Website Filtering

Sorry for my last question. I will focus this thread to discuss only the filtering mechanism since it might be useful for others.


始まりの荒野を独り もう歩き出してるらしい、僕は灰になるまで僕で有り続けたい
http://about.me/nnhnkn | http://identi.ca/nnhzkn

Offline

Board footer

Powered by FluxBB