socks 5 to bypass proxy settings

sulekha · 10-07-2010, 05:06 AM

An application that supports SOCKS 5 protocol can forward its network connection over ssh and dynamically forward to any host name that you specify isn't it ? that means firebox web browser can use SOCKS 5 protocol can be used by pass proxy settings isn't it ?

so how can a sys admin remotely detect if a particular user is bypassing proxy settings using SOCKS 5 protocol ?

unSpawn · 10-09-2010, 03:21 PM

Quote:

Originally Posted by sulekha

so how can a sys admin remotely detect if a particular user is bypassing proxy settings using SOCKS 5 protocol ?

Missing Forward / Via headers? The source address not being what he is expecting? Remote ephemeral port usage (/proc/sys/net/ipv4/ip_local_port_range) not matching that of a heavily used server (vs regular workstation use)? Also please note (help with) circumventing network policies and restrictions isn't a valid topic on LQ.