6

My college has installed a security system called Cyberoam. Now they have blocked many things including youtube, break, etc., as a counter measure, I tried to find a way to circumvent this security package/firewall. That is how I came to know about Tor. But even Tor is not working? Can somebody tell me how can I use Tor in a secure environment managed by cyberoam security package/firewall? Or if there is any other way to circumvent this package?

  • Did you try with a VPN? – user3524 Dec 31 '15 at 9:25
  • @Pielco11 Yes, I tried openvpn. It didn't worked. – kashish Dec 31 '15 at 15:33
  • When you tried bridges, what did you tried exactly? – user3524 Dec 31 '15 at 17:54
  • @Pielco11 I sent a email to tor and got bridges. In tor bundle, in tor bridges configuration, I entered custom bridges that I received in the email and tried to connect. But I got "Unable to create a encrypted directory connection." – kashish Jan 1 '16 at 2:45
1
+50

According to this old ticket, you'll probably have to use pluggable transports...

  • Hye! Thank you for answering. It's new year holidays. I will try this when I get back to college and get back to you. – kashish Jan 1 '16 at 3:18
  • Meanwhile, what I deciphered from above post is that It may work if I use obfs3 bridges on port 443. – kashish Jan 1 '16 at 3:21
1

Try to seed your Tor instance outside your firewalled network, i.e. via another network exit(wifi, cell, etc.). After that try to use your pre-seeded instance inside the system. And - try to do the same with I2P, and if it will work - use it as HTTP(S) proxy for Tor if you're unable to do the dir connection. Also please post your torrc and Tor output - I will be able to help you further then.

  • Try to seed your Tor instance outside your firewalled network, i.e. via another network exit(wifi, cell, etc.). After that try to use your pre-seeded instance inside the system . yes! that works. but why? – kashish May 7 '16 at 4:11
  • @kashish because seeding makes an actual node addresses available offline from your instance's folder data, i.e. it can learn about very new exits, guards, e.t.c. - not blocked by censoring h/w and s/w – Alexey Vesnin May 7 '16 at 15:26
0

I think DNS traffic is not blocked/censored by Cyberoam. In that case, there is a way to tunnel your IP traffic over DNS. Have a look at iodine and here are instructions to set it up.

Typically you will need to do the following -

  1. Get a VPS server (digitalocean, linode and like) and install iodine server on it. (cost: ~$5)
  2. Buy a domain name, if you don't have one. The create a sub-domain and point it's nameserver to your VPS server IP. (cost: ~$8)
  3. Lastly install the iodine client on your computer and start tunneling traffic via it.

The above does require basic familiarity with linux and some monetary investment on your part.

Alternatively: Most common proxy servers are blocked via a backlist. So if you pay for your own VPS server (about $5), you can also install an HTTP proxy on it. It should be quickest way to get started.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.