My college has installed a security system called Cyberoam. Now they have blocked many things including youtube, break, etc., as a counter measure, I tried to find a way to circumvent this security package/firewall. That is how I came to know about Tor. But even Tor is not working? Can somebody tell me how can I use Tor in a secure environment managed by cyberoam security package/firewall? Or if there is any other way to circumvent this package?
Did you try with a VPN?– user3524Dec 31, 2015 at 9:25
@Pielco11 Yes, I tried openvpn. It didn't worked.– kashishDec 31, 2015 at 15:33
When you tried bridges, what did you tried exactly?– user3524Dec 31, 2015 at 17:54
@Pielco11 I sent a email to tor and got bridges. In tor bundle, in tor bridges configuration, I entered custom bridges that I received in the email and tried to connect. But I got "Unable to create a encrypted directory connection."– kashishJan 1, 2016 at 2:45
According to this old ticket, you'll probably have to use pluggable transports...
Hye! Thank you for answering. It's new year holidays. I will try this when I get back to college and get back to you. Jan 1, 2016 at 3:18
Meanwhile, what I deciphered from above post is that It may work if I use obfs3 bridges on port 443. Jan 1, 2016 at 3:21
Try to seed your Tor instance outside your firewalled network, i.e. via another network exit(wifi, cell, etc.). After that try to use your pre-seeded instance inside the system. And - try to do the same with I2P, and if it will work - use it as HTTP(S) proxy for Tor if you're unable to do the dir connection. Also please post your
torrc and Tor output - I will be able to help you further then.
Try to seed your Tor instance outside your firewalled network, i.e. via another network exit(wifi, cell, etc.). After that try to use your pre-seeded instance inside the system. yes! that works. but why? May 7, 2016 at 4:11
@kashish because seeding makes an actual node addresses available offline from your instance's folder data, i.e. it can learn about very new exits, guards, e.t.c. - not blocked by censoring h/w and s/w– Alexey Vesnin ♦May 7, 2016 at 15:26
I think DNS traffic is not blocked/censored by Cyberoam. In that case, there is a way to tunnel your IP traffic over DNS. Have a look at iodine and here are instructions to set it up.
Typically you will need to do the following -
- Get a VPS server (digitalocean, linode and like) and install iodine server on it. (cost: ~$5)
- Buy a domain name, if you don't have one. The create a sub-domain and point it's nameserver to your VPS server IP. (cost: ~$8)
- Lastly install the iodine client on your computer and start tunneling traffic via it.
The above does require basic familiarity with linux and some monetary investment on your part.
Alternatively: Most common proxy servers are blocked via a backlist. So if you pay for your own VPS server (about $5), you can also install an HTTP proxy on it. It should be quickest way to get started.