Ok, so the upshot is, you cheat the restrictions, and ssh via a web proxy,
the same way https tunnels through a web proxy.

Stuff that comes to mind:

The web cache may timeout the connection.

Other ports:

I just checked our squid config, and the ports that you could do this with
(with the default config) are 443, and 563. (using CONNECT).

563 is a TLS wrapped NNTP.

So 563 might be a good candidate for your ssh daemon port. (especially if
you're using squid).

Also, you may wish to conisider other possible things to forward.

You could setup your own VPN using pppd running off a tcp port.....
(probably with a TLS wrapper).

Even better, it'd be a TLS connection... so completely indestinguishable
from a normal connect request, even with the data.

My two cents.. nice idea ;)

-Antony


Reply via email to