LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-27-2024, 04:40 AM   #16
Jason.nix
Member
 
Registered: Feb 2023
Posts: 567

Original Poster
Rep: Reputation: 10

Quote:
Originally Posted by yvesjv View Post
That's the closest you will get to having your vpn as it uses tcp 443 which is also used for https.
Pretty much detectable by any worthwile security providers (think PaloAlto, etc) but if tcp 443 is blocked, then it's a massive business impact.
Hello,
Thank you so much for your reply.
I don't think anyone closes port 443!
 
1 members found this post helpful.
Old 01-27-2024, 04:41 AM   #17
Jason.nix
Member
 
Registered: Feb 2023
Posts: 567

Original Poster
Rep: Reputation: 10
Quote:
Originally Posted by Aeterna View Post
Everything can be detected, unless one is disconnected from the net. However, if there is no special interest in specific person, this works pretty well.
Hello,
Thank you so much for your reply.
Sure, but if the VPN traffic appears to be HTTPS then it will not be blocked.
 
Old 01-27-2024, 04:45 AM   #18
Jason.nix
Member
 
Registered: Feb 2023
Posts: 567

Original Poster
Rep: Reputation: 10
Quote:
Originally Posted by pan64 View Post
It looks like you don't understand a lot of things. OpenVPN is not an app, tor is not an app. Better to say they are services, and they do not run on a single host, but on several hosts (different parts of them). Some parts of these tools are just a special kind of network config (like firewall, routing), some other parts are just (protected) network communication between two hosts.

Check this page: https://www.torproject.org/about/history/

Tor browser itself is just an "improved" firefox.

Here you can read about your topic a bit more: https://tb-manual.torproject.org/circumvention/

So can you tell me how can any kind of censorship detect and exactly what?
Hello,
Thank you so much for your reply.
You right. OpenVPN and Tor are easily detected by a firewall like FortiWeb. Even older models of Fortinet devices can block them.
 
Old 01-27-2024, 04:59 AM   #19
Aeterna
Senior Member
 
Registered: Aug 2017
Location: Terra Mater
Distribution: VM Host: Slackware-current, VM Guests: Artix, Venom, antiX, Gentoo, FreeBSD, OpenBSD, OpenIndiana
Posts: 1,011

Rep: Reputation: Disabled
Quote:
Originally Posted by Jason.nix View Post
Hello,
Thank you so much for your reply.
Can I use OpenVPN with SSL? I want to set up my own VPN server.
Yes, you can. There are few OpebVPN providers that have configured openvpn with ssl. Just search the web.
 
Old 01-27-2024, 05:25 AM   #20
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 22,004

Rep: Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338
Quote:
Originally Posted by Jason.nix View Post
Hello,
Thank you so much for your reply.
You right. OpenVPN and Tor are easily detected by a firewall like FortiWeb. Even older models of Fortinet devices can block them.
No.
Quote:
FortiWeb defends web applications and APIs against OWASP Top-10 threats, DDOS attacks, and malicious bot attacks.
 
Old 01-27-2024, 12:44 PM   #21
Jason.nix
Member
 
Registered: Feb 2023
Posts: 567

Original Poster
Rep: Reputation: 10
Quote:
Originally Posted by Aeterna View Post
Yes, you can. There are few OpebVPN providers that have configured openvpn with ssl. Just search the web.
Hello,
Thanks again.
I guess this is impossible because if you use tcp/443, on a close enough look it will be clear this is not HTTPS.
 
Old 01-27-2024, 12:49 PM   #22
Jason.nix
Member
 
Registered: Feb 2023
Posts: 567

Original Poster
Rep: Reputation: 10
Quote:
Originally Posted by pan64 View Post
No.
Hi,
Thanks again.
Ah, I meant FortiGate. Please take a look at https://docs.fortinet.com/document/f...h%20for%20Tor..
 
Old 01-27-2024, 05:16 PM   #23
yvesjv
Member
 
Registered: Sep 2015
Location: Australia
Distribution: Slackware, Devuan, Freebsd
Posts: 578

Rep: Reputation: Disabled
Quote:
Originally Posted by Jason.nix View Post
Hello,
Thank you so much for your reply.
I don't think anyone closes port 443!
An ISP can block tcp443 if conditions are not met.
For example the poor folk living behind the great firewall of China.

There are lots of materials on the web for reading and implementing the solution you seek.
 
Old 01-28-2024, 04:00 AM   #24
Jason.nix
Member
 
Registered: Feb 2023
Posts: 567

Original Poster
Rep: Reputation: 10
Quote:
Originally Posted by yvesjv View Post
An ISP can block tcp443 if conditions are not met.
For example the poor folk living behind the great firewall of China.

There are lots of materials on the web for reading and implementing the solution you seek.
Hello,
Thank you so much for your reply.
I couldn't find anything. Can you show me some tutorials?
 
Old 01-28-2024, 04:24 AM   #25
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 22,004

Rep: Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338
Quote:
Originally Posted by Jason.nix View Post
Hi,
Thanks again.
Ah, I meant FortiGate. Please take a look at https://docs.fortinet.com/document/f...h%20for%20Tor..
That is a signature based identification, and works only if unmodified. It cannot detect the app itself.
 
Old 01-28-2024, 04:31 AM   #26
Jason.nix
Member
 
Registered: Feb 2023
Posts: 567

Original Poster
Rep: Reputation: 10
Quote:
Originally Posted by pan64 View Post
That is a signature based identification, and works only if unmodified. It cannot detect the app itself.
Hello,
Thanks again.
BTW, when you enabled DPI, then Tor can't work.
 
Old 01-28-2024, 03:52 PM   #27
yvesjv
Member
 
Registered: Sep 2015
Location: Australia
Distribution: Slackware, Devuan, Freebsd
Posts: 578

Rep: Reputation: Disabled
Quote:
Originally Posted by Jason.nix View Post
Hello,
Thank you so much for your reply.
I couldn't find anything. Can you show me some tutorials?
Sure,
https://openvpn.net/community-resources/
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Massive, undetectable security flaw found in USB. LXer Syndicated Linux News 0 08-01-2014 01:41 AM
Can't empty undetectable contents of Wastebin in kde nnjond Linux - Newbie 8 09-23-2010 06:56 AM
Hard drive undetectable + Grub error 22 zsejk Linux - Laptop and Netbook 15 12-11-2006 06:33 AM
msi wireless card undetectable herve2001 Slackware 1 10-27-2004 04:58 PM
undetectable ext3 partition, but mountable and accessible, unable to boot hypermegachi Linux - Newbie 1 10-26-2003 03:56 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:54 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration