If you allow any real-time protocol through your firewall, someone can
tunnel through it.  It's a fact of life.  If you allow telnet, ssh,
http, even nntp or smtp, it can be used to tunnel another protocol.
If you want to disable tunneling, unplug yourself from the 'net.  If
that isn't an option, then you're going to have to use social means to
prevent people from doing it.

-derek

Ron Peterson <[EMAIL PROTECTED]> writes:

> 
> Derek Martin wrote:
> 
> > What I had to do was go into preferences and set my transport to "always
> > use HTTP" and then it worked fine.
> 
> Speaking of realaudio on port 80, does anyone know of any stateful
> inspection tools that run on Linux that would be able to block this?  I
> have half a T1 for my office for about 60 people.  I've got packet
> filtering in place, but nothing to block tunneled traffic like this. 
> Any ideas?
> 
> BTW - I'm not conspiring against Derek. ;-)  I have nothing against
> realaudio - I use it myself.  Just not at the office.
> 
> Ron Peterson
> [EMAIL PROTECTED] (home)
> [EMAIL PROTECTED] (work)
> -
> Subcription/unsubscription/info requests: send e-mail with
> "subscribe", "unsubscribe", or "info" on the first line of the
> message body to [EMAIL PROTECTED] (Subject line is ignored).

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/      PP-ASEL      N1NWH
       [EMAIL PROTECTED]                        PGP key available


**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************

Reply via email to