Results 1 to 2 of 2

Thread: Uncanny Issue - May be Broken Firewall

  1. #1
    Junior Member
    Join Date
    May 2011
    Posts
    3

    Exclamation Uncanny Issue - May be Broken Firewall

    Hi All Network guru ,

    I use a bypass tool ( http tunnel ) to bypass network ...If I dont provide HTTP Proxy information in it gives direct connection...

    But it should not work since except http proxy all ip/port are blocked for me

    Today I just noticed that I can make direct connection through that companies firewall only using port 443..

    Though they have firewall installed..I can use port 443 to talk with outer world.....But it should not be .Other ports are closed...

    When I try from WINdows XP all port including 443 is block for me ..But from WIN 7 only port 443 is open for me.....( I tested from multiple PC / OS / BROWSER / APPLICATION)
    For WINDOWS 7 without using http proxy I can easily open only secure sites using mozilla.
    NOTE I DISABLE WINDOWS FIREWALL in both case.

    After learning few thing from here and there .I found that it may be that Broken firewall
    issue....In one forum I found following line ...

    <<<....Really? Is that why all of the broken firewalls stopped blocking packets
    with ECN bits?....>>>

    I learnt about ECN bits and what I understand is if firewall does not support ECN it should drop connection....But it should not let the connection through...


    My observation is in WIN 7 due to broken firewall issue i can use port 443 ..Though they have blocked port 443 ..But for firewall bug port 443 open some how...


    But for Windows XP it is not working! If I can do Windows XP TCP tune I can bypass using port 443 from XP also....


    Please give me light!!! What is actually happening?
    Why port 443 open ? Please be conformed that the company not intentionally keep port 443 open!
    ....and how to make it work in XP...


    Many thanks - Ara

  2. #2
    A+, Security+, Mobility+ Shinobi's Avatar
    Join Date
    Jan 2001
    Location
    South Carolina
    Posts
    4,432
    Blog Entries
    1
    Quote Originally Posted by nel_29 View Post
    Hi All Network guru ,

    I use a bypass tool ( http tunnel ) to bypass network ...If I dont provide HTTP Proxy information in it gives direct connection...

    But it should not work since except http proxy all ip/port are blocked for me

    Today I just noticed that I can make direct connection through that companies firewall only using port 443..

    Though they have firewall installed..I can use port 443 to talk with outer world.....But it should not be .Other ports are closed...

    When I try from WINdows XP all port including 443 is block for me ..But from WIN 7 only port 443 is open for me.....( I tested from multiple PC / OS / BROWSER / APPLICATION)
    For WINDOWS 7 without using http proxy I can easily open only secure sites using mozilla.
    NOTE – I DISABLE WINDOWS FIREWALL in both case.

    After learning few thing from here and there .I found that it may be that Broken firewall
    issue....In one forum I found following line ...

    <<<....Really? Is that why all of the broken firewalls stopped blocking packets
    with ECN bits?....>>>

    I learnt about ECN bits and what I understand is if firewall does not support ECN it should drop connection....But it should not let the connection through...


    My observation is in WIN 7 due to broken firewall issue i can use port 443 ..Though they have blocked port 443 ..But for firewall bug port 443 open some how...


    But for Windows XP it is not working! If I can do Windows XP TCP tune I can bypass using port 443 from XP also....


    Please give me light!!! What is actually happening?
    Why port 443 open ? Please be conformed that the company not intentionally keep port 443 open!
    ....and how to make it work in XP...


    Many thanks - Ara
    1) It may not be the software firewall on the workstation, it may be a hardware firewall.

    2) A lot of users on the forum here will not offer advice in regards to circumventing security of your company LAN... seems like that is what you are trying to do, sorry.
    _______________________________________________
    Vendor neutral certified in IT Project Management, IT Security, Cisco Networking, Cisco Security, Wide Area Networks, IPv6, IT Hardware, Unix, Linux, and Windows server administration

Similar Threads

  1. Replies: 0
    Last Post: 12-24-09, 07:22 PM
  2. Firewall Issue
    By Ankur in forum comp.security.firewalls
    Replies: 1
    Last Post: 06-13-08, 06:43 AM
  3. Firewall and MSN issue, plz help!
    By jackyue23 in forum Networking Forum
    Replies: 0
    Last Post: 09-08-02, 08:21 PM
  4. Replies: 5
    Last Post: 02-15-02, 01:01 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •