Sujet : Re: Young people peering
De : gtaylor (at) *nospam* tnetconsulting.net (Grant Taylor)
Groupes : news.admin.peering news.software.nntpDate : 19. Apr 2024, 15:33:39
Autres entêtes
Organisation : TNet Consulting
Message-ID : <uvtvc3$tkt$3@tncsrv09.home.tnetconsulting.net>
References : 1 2 3 4 5 6 7 8 9 10
User-Agent : Mozilla Thunderbird
On 4/19/24 02:12, Marco Moock wrote:
Until they heard of SSL-VPN (via TCP port 443). That can be easily implemented in ocserv on Linux and looks like normal web traffic.
Except for the fact that the school used a TLS bumping proxy and you couldn't initiate TLS traffic without passing through the bumping proxy. The bumping proxy could effectively block TLS VPNs.
Access to the Internet is not the same as being on the Internet. The school computers had access to the Internet. Access that was easily filtered / blocked.
Trying to usurp the filtering garnered an unpleasant conversation.
It was more pleasant to try to connect to a site, find out it was blocked, fill out the form to request it be unblocked, and follow the process.
Sometimes they would allow a student to use a teacher's computer (or the teacher could sign in to a student computer / proxy) and the teacher could supervise what the student was doing.
It worked well, it provided the desired access to the Internet, and it provided a reasonable amount of protection using the technology available at the time.
-- Grant. . . .