[Openvpn-users] Running openvpn over port 80/443

[Andreas Jung]

I have an openvpn server running on a root server. Sometimes I am inside a
company network where only port 80 and 443 are open (no HTTP(S) proxy, just
a portfilter). Is there a way to tunnel openvpn through these ports?

Andreas

[Jon Bendtsen]

Post by Andreas Jung
I have an openvpn server running on a root server. Sometimes I am
inside a company network where only port 80 and 443 are open (no
HTTP(S) proxy, just a portfilter). Is there a way to tunnel openvpn
through these ports?

Yes, just change the port on the server using the --port directive.
You might need to run TCP as well.



JonB

[p***@nexg.net]

Transmit Report:

***@nexg.net¿¡°Ô žÞÀÏ ¹ßŒÛÀ» 3¹ø œÃµµÇßÁöžž œÇÆÐÇÏ¿ŽœÀŽÏŽÙ.
(œÇÆÐ ÀÌÀ¯ : 550 <***@nexg.net>: Recipient address rejected: User unknown in local recipient table(211.232.190.7))

<Âü°í> œÇÆÐ ÀÌÀ¯¿¡ ŽëÇÑ Œ³ží
User unknown :žÞÀÏÀ» ŒöœÅÇÒ »ç¿ëÀÚ°¡ ÁžÀçÇÏÁö ŸÊÀœ
Socket connect fail:ŒöœÅ žÞÀÏ Œ­¹ö¿Í ¿¬°á œÇÆÐ
DATA write fail :ŒöœÅ žÞÀÏ Œ­¹ö·Î žÞŒŒÁö ŒÛœÅ œÇÆÐ
DATA reponse fail :ŒöœÅ žÞÀÏ Œ­¹ö·ÎºÎÅÍ žÞŒŒÁö ŒöœÅ œÇÆÐ

[John A. Sullivan III]

Post by Andreas Jung
I have an openvpn server running on a root server. Sometimes I am inside a
company network where only port 80 and 443 are open (no HTTP(S) proxy, just
a portfilter). Is there a way to tunnel openvpn through these ports?
Andreas

We've been doing this very successfully in production in the ISCS
network security management project (http://iscs.sourceforge.net). We
create a server with a configuration to use tcp and port 443. We
typically put at least two configs on the clients - one for normal udp
(since it performs better) and one for https (for when behind a
restrictive firewall).

We typically choose 443 over 80 in case the firewall is also doing
content filtering. We assumed that some sites might restrict anything
other than http trying to use port 80 but that 443 could not be
restricted since it is encrypted and the contents cannot be inspected.
That was a guess. Can anyone confirm that by experience? - John