Tutorial Para Sa mga Advance
note: Bago nauso si VPN ito muna ang ginamit na pang baypass at subok
nang nagamit din dati sa Fbt/Ubt. Kung Hindi man work wag mag alala,
positive parin ang feed back. Imba Speed lalo ang net. Ito ang ilagay nyong autoscript configuration(Xp-Windows 7).,sa Automatic Configuration Script Ng Browser Ninyo :~# dig @nscache.us.sixxs.net AAAA nscache.us.sixxs.net; <<>> DiG 9.9.0 <<>> @nscache.us.sixxs.net AAAA nscache.us.sixxs.net; (1 server found);; global options: +cmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13041;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION:;nscache.us.sixxs.net. IN AAAA ;; ANSWER SECTION:nscache.us.sixxs.net. 3600 IN AAAA 2001:4de0:1000:a3::2nscache.us.sixxs.net. 3600 IN AAAA 2001:4de0:1000:a4::2 ;; Query time: 1274 msec;; SERVER: 2001:4de0:1000:a4::2#53(2001:4de0:1000:a4::2);; WHEN: Sun Jan 25 17:57:48 2035;; MSG SIZE rcvd: 94 OR function FindProxyForURL(url, host) { if(!((url.substring(0,5) ==
"http:") || (url.substring(0,4) == "ftp:") || (url.substring(0,6) ==
"https:"))) { return "DIRECT"; } if(isPlainHostName(host) || (host ==
"127.0.0.1") || (host == "localhost")) { return "DIRECT"; } if ((host ==
"AAACCC.AAABBB") || (host == "AAACCC-us.AAABBB") || (host ==
"AAACCC-de.AAABBB") || (host == "webdav.AAABBB" )) { return "PROXY
proxy.pvgl.AAA.pwp:9090; PROXY proxy.sin.AAA.pwp:9090; "; } if
(shExpMatch(host, "10.*.*.*" )) { return "DIRECT"; } if
(dnsDomainIs(host, ".AAABBB") || dnsDomainIs(host, ".AAA.pwp") ||
dnsDomainIs(host, ".AAAhosting.pwp")) { return "DIRECT"; } return "PROXY
proxy.pvgl.AAA.pwp:9090; PROXY proxy.sin.AAA.pwp:9090; "; } Ito Naman Kung Saan Ilagagay Yung Automatic Script
Pag sa LAN dito mo ilalagay.,ung mga naka DSL na walang VPN.,wag nyo intindihin ung nasa Address na nasa picture.,.
Pag Broadband naman gamit mo punta ka sa Settings den sa Change Proxy Settings den sa Profile Apn ninyo tulad ng nasa baba , smart yung ginamit kong profile name.,paste nyo sa Address ,.,Iba naman yung sa firefox, hanapin na lang ninyo at sa opera
then ito naman ung DNS para sa Windows 7 only (Tap Driver at sa DNS) Primary 2001:4de0:1000:a3::2Secondary 2001:4de0:1000:a4::2
Para sa WINS at DNS,.,sa (Tap Driver at sa DNS din toh) IPv4,.(ayaw ko na mag upload ng picture .,tinatamad na ko hehehehe) DNS: Primary 3.3.3.3Secondary 4.4.4.4 WINS: Primary 3.3.3.3Secondary 4.4.4.4 Ito Naman ng Tutorial at Explanation panu pag gawa ng sarili ninyong autoscript Using Automatic Configuration, Automatic Proxy, and Automatic Detection From technet.microsoft.com Using Automatic Configuration
With automatic configuration, you can control browser settings on your
users' computers from one central location. To use automatic
configuration, you must create an IEAK Profile by using the IEAK Profile
Manager. This profile consists of an auto-configuration .ins file and
associated cabinet (.cab) files that contain information for configuring
your users' browsers. You must then copy the .ins and .cab files to a
server location that is accessible from your users' computers. For
information about how to create an IEAK Profile by using the IEAK
Profile Manager, see "Keeping Programs Updated" in this Resource Kit.
When you run the Internet Explorer Customization Wizard, you can set up
automatic configuration for your custom browser packages. To set up automatic configuration
1. In Internet Explorer, click the Tools menu, and then click Internet Options.
2. Click the Connections tab, and then click LAN Settings.
3. In the Proxy server area, select the Use a proxy server check box.
4. Type the Address and Port number for your proxy server.
If you want to assign different proxy server information for HTTP,
Secure, FTP, Gopher, and Socks protocols, click Advanced, and then in
the Proxy Settings page, fill in the proxy location and port number for
each protocol. JavaScript or JScript Auto-proxy Examples The following 10 scripts provide JavaScript or Microsoft® JScript®
examples of how an auto-proxy configuration (.pac) file could be used to
specify an auto-proxy URL. To use these examples, you must change the
proxy server names, port numbers, and IP addresses. Note The isInNet(), isResolvable(), and dnsResolve() functions query a
DNS server. References to Object Model objects, properties, or methods
cause the .pac file to fail silently. For example, the references
window.open(...) and password(...) cause the .pac file to fail on
Internet Explorer.Example 1: Local hosts connect directly; all others connect through a proxy server. The following function checks whether the host name is a local host,
and if it is, whether the connection is direct. If the host name is not a
local host, the connection is made through a proxy server. function FindProxyForURL(url, host){ if (isPlainHostName(host))return "DIRECT";elsereturn "PROXY proxy:80";} The isPlainHostName() function checks whether there are any dots in
the host name. If there are, it returns FALSE; otherwise, it returns
TRUE.Example 2: Hosts inside the firewall connect directly; outside local servers connect through a proxy server. The following function checks whether the host name is a "plain" host
name (meaning it does not contain the domain name) or part of a
particular domain (.domain.com), and does not contain "www" or "home." function FindProxyForURL(url, host){if ((isPlainHostName(host) ||dnsDomainIs(host, ".microsoft.com")) &&!localHostOrDomainIs(host, "www.microsoft.com") &&!localHostOrDomainIs(host, "home.microsoft.com"))return "DIRECT";else return "PROXY proxy:80";} Note The localHostOrDomainIs() function is executed only for URLs in
the local domain. The dnsDomainIs() function returns TRUE if the domain
of the host name matches the domain given.Example 3: If host is resolvable, connect directly; otherwise, connect through a proxy server. The following function asks the DNS server to resolve the host name
passed to it. If it can resolve the host name, a direct connection is
made. If it cannot resolve the host name, the connection is made through
a proxy server. This function is useful if you use an internal DNS
server to resolve all internal host names. function FindProxyForURL(url, host){if (isResolvable(host))return "DIRECT";elsereturn "PROXY proxy:80";} Example 4: If the host is in the specified subnet, connect directly; otherwise, connect through a proxy server. The following function compares a given IP address pattern and mask
with the host name. This is useful if certain hosts in a subnet should
be connected directly and others should be connected through a proxy
server. function FindProxyForURL(url, host){if (isInNet(host, "999.99.9.9", "255.0.255.0"))return "DIRECT";elsereturn "PROXY proxy:80";} The isInNet(host, pattern, mask) function returns TRUE if the host IP
address matches the specified pattern. The mask indicates which part of
the IP address to match (255=match, 0=ignore).Example 5: Determine connection type based on host domain. The following function specifies a direct connection if the host is
local. If the host is not local, this function determines which proxy
server to use based on the host domain. This is useful if the host
domain name is one of the criteria for proxy server selection.
function FindProxyForURL(url, host){if (isPlainHostName(host))return "DIRECT";else if (shExpMatch(host, "*.com"))return "PROXY comproxy:80";else if (shExpMatch(host, "*.edu"))return "PROXY eduproxy:80";elsereturn "PROXY proxy";} The shExpMatch(str, shexp) function returns TRUE if str matches the shexp using shell expression patterns.Example 6: Determine connection type based on protocol being used. The following function extracts the protocol being used and makes a
proxy server selection accordingly. If no match is made for the
protocol, a direct connection is made. This function is useful if the
protocol being used is one of the criteria for proxy server selection. function FindProxyForURL(url, host){if (url.substring(0, 5) == "http:") {return "PROXY proxy:80";}else if (url.substring(0, 4) == "ftp:") {return "PROXY fproxy:80";}else if (url.substring(0, 7) == "gopher:") {return "PROXY gproxy";}else if (url.substring(0, 6) == "https:") {return "PROXY secproxy:8080";}else { return "DIRECT";}} The substring() function extracts the specified number of characters from a string.Example 7: Determine proxy setting by checking whether the host name matches the IP address. The following function makes a proxy server selection by translating
the host name into an IP address and comparing it to a specified string. function FindProxyForURL(url, host){if (dnsResolve(host) == "999.99.99.999") { // = http://secproxy return "PROXY secproxy:8080";}else { return "PROXY proxy:80";}} The dnsResolve() function translates the host name into the numeric IP address.Example 8: If the host IP matches the specified IP, connect through a proxy server; otherwise, connect directly. The following function is another way to make a proxy server
selection based on a specific IP address. Unlike Example 7, this one
uses the function call to explicitly get the numeric IP address. function FindProxyForURL(url, host){if (myIpAddress() == "999.99.999.99") {return "PROXY proxy:80"; } else {return "DIRECT";}} The myIpAddress() function returns the IP address (in integer-dot format) of the host that the browser is running on.Example 9: If there are any dots in the host name, connect through a proxy server; otherwise, connect directly. The following function checks how many dots are in the host name. If
there are any dots, the connection is made through a proxy server. If
there are no dots, a direct connection is made. This is another way to
determine connection types based on characteristics of the host name. function FindProxyForURL(url, host){if (dnsDomainLevels(host) > 0) { // if number of dots in host > 0 return "PROXY proxy:80";}return "DIRECT";} The dnsDomainLevels() function returns an integer equal to the number of dots in the host name.Example 10: Specify days of the week to connect through a proxy server; other days connect directly. The following function determines the connection type by specifying
the days of the week that are appropriate for a proxy server. Days that
do not fall within these parameters use a direct connection. This
function could be useful in situations where you might want to use a
proxy server when traffic is heavy and allow a direct connection when
traffic is light. function FindProxyForURL(url, host){if(weekdayRange("WED", "SAT", "GMT"))return "PROXY proxy:80";elsereturn "DIRECT";} The weekdayRange( <day1> [,<day2>] [,<GMT>] )
function returns whether the current system time falls within the range
specified by the parameters <day1>, <day2>, and <GMT>.
Only the first parameter is necessary. The GMT parameter sets the times
to be taken in GMT rather than in the local time zone. Note Where the function is called with <day1> == <day2>,
previous versions of Internet Explorer would yield results different
from results with Netscape Navigator. Specifically, previous versions of
Internet Explorer would interpret this day range as an entire week,
while Internet Explorer 6 and Netscape Navigator interpret the range as a
single day. For example, if the current day is Monday, the call
weekdayRange("TUE", "TUE") returns TRUE on previous versions of Internet
Explorer and FALSE on Internet Explorer 6 and Netscape Navigator
As you can see, setting up such tunnels does not requires advanced
skills, especially with the recent Linux distributions which come with
pre-installed and pre-configured ssh servers.
With a little more skills, it is possible to tunnel just about
everything into everything. For example, it is possible to tunnel PPP
into HTTP, providing a full IP-stack tunnelling, including ICMP
(ping...), DNS and servers (backward tunnels).
Opensource and commercial VPN solutions also come into mind.
See references for programs and papers about firewall bypassing below.
Security is not only a matter of firewall configuration, it must be seen at a larger scale. Do not rely on the firewall alone. Censorship bypassing should not be only considered as a terrorist or
h@cker weapon, but also as tools for privacy, free speech, democraty and
human rights protection (Please read papers written by PGP-author Philip Zimmerman, they are very instructive). List Of Software About Tunneling and Firewall/Proxy/Censorship Bypassing: ALL NETWORKS Glype:http://www.glype.com/
The Glype proxy has been created in the same spirit as Circumventor.
It’s installed on an unblocked computer, which the user then accesses to
retrieve Web pages that are normally blocked. It’s different from
Circumventor in that it needs to be installed on a Web server running
PHP, not just any old PC with Internet access. To that end, it’s best
for situations where a Web server is handy or the user knows how to set
one up manually. Circumventor:http://www.peacefire.org/circumventor/
Developed by Bennett Haslelton of the anti-Internet-censorship site
Peacefire.org, Circumventor works a little bit like Tor in that each
machine running the Circumventor software is a node in a network. ProxyTunnel :http://proxytunnel.sourceforge.net
TCP-into-HTTP(S) tunneling program ; requires the HTTP proxy to accept the CONNECT command. SSH Tunnelling howto :http://proxytunnel.sourceforge.net/papers/muppet-200204.html
Instructions for TCP-into-HTTP tunnelling using SSH and ProxyTunnel. Bypassing internet censorship : http://www.zensur.freerk.com
Ways to bypass censorship, using various technics. How to Bypass Most Firewall Restrictions and Access the Internet Privately :http://www.buzzsurf.com/surfatwork/
Document on firewalls bypassing and tunnelling. Breaking Firewalls with OpenSSH and PuTTY : http://souptonuts.sourceforge.net/sshtips.htm
Using putty and OpenSSH when the firewall allows port 22 in. The enemy within: Firewalls and backdoors : http://www.securityfocus.com/infocus/1701
Article about firewalls and security. GNU HTTP Tunnel :http://www.nocrew.org/software/httptunnel.html
Opensource TCP-into-HTTP tunnelling. PlugDaemon :http://www.taronga.com/plugdaemon/
TCP port forwarder with HTTPS proxy support. OpenSSH :http://www.openssh.com
Opensource ssh client and server.
OpenSSH for Windows: http://sshwindows.sourceforge.net/
Windows version of OpenSSH. (The server only works under 2000/XP, but a 9x version is planned.) OpenVPN : http://openvpn.sourceforge.net/
Excellent, secure and flexible opensource SSL-based VPN program. Can work over UDP, TCP or even HTTP trough proxies. http://sixy.ch/tags/freehttp://ietf.org/rfc/rfc3093.txt
So-called Firewall Enhancement Protocol (FEP). DesProxy :http://desproxy.sourceforge.net
Allows to make direct TCP connections through HTTP proxy which accept
the CONNECT command. Does not require external server as in our solution
above. TransConnect:http://transconnect.sourceforge.net
Uses the CONNECT proxy HTTP command to make direct connections to the internet. CorkScrew:http://www.agroman.net/corkscrew/
Tunnels SSH traffic through HTTP proxies. HTTP Bridge:http://httpbridge.sourceforge.net
A CGI-based secure HTTP proxy written in Java. Requires Tomcat. PsiPhon:http://psiphon.civisec.org/
Password-protected HTTP proxy server designed to circumvent censorship.
HTTP Proxy Lib: http://httppc.sourceforge.net
A library to add TCP-into-HTTP capability to your programs. STunnel: http://stunnel.mirt.net
Generic TCP-into-SSL wrapper. STunnel:http://www.stunnel.org
Generic TCP-into-SSL wrapper. SSLProxy: http://www.obdev.at/products/ssl-proxy/
Generic TCP-into-SSL wrapper. No longuer maintained (Authors recommend STunnel instead). TLSWrap :http://tlswrap.sunsite.dk
TLS/SSL wrapper/proxy for FTP. HTTP Tunnel : http://www.http-tunnel.com
Commercial encrypted TCP-into-HTTP tunnelling service. Low-bandwith free service available.
HTTP Tunnel : http://http-tunnel.sourceforge.net/
Opensource SOCKS proxy capable of tunnelling traffic through HTTP
proxies. Client and server provided. Server can run standalone (perl) or
on a hosted server (php). HTTPort : http://www.htthost.com
Commercial TCP-into-HTTP tunnelling service (encrypted). BarracudaDrive :http://barracudaserver.com/products/BarracudaDrive/MxTunnel.lsp
Free TCP-into-HTTPS tunnelling server with HTTP proxy support
(command-line java client), including a web-based file manager,
web-based chat and graphical file transfer java client. Hamachi :http://hamachi.cc/
Free and simplified UDP-based VPN solution capable of traversing NAT firewalls. Your-Freedom :http://www.your-freedom.net/
Free TCP-into-HTTP tunnelling service. Additional sevices are not free. Socks via HTTP :http://lightbox.ath.cx/socks/
A SOCKS proxy which tunnels all traffing into HTTP requests. Can also
tunnel static ports. Client and server provided. Written in Java. Zebedee :http://www.winton.org.uk/zebedee/
Opensource cross-plateform TCP/UDP-into-SSL tunnel. Socks2HTTP : http://www.totalrc.net
Commercial Socks proxy which tunnels TCP and UDP into HTTP. SSL Explorer :http://www.sshtools.com/products/enterprise/ssl-explorer/ssl-explorer.jsp
TCP-into-HTTPS tunnelling and more. The clients only requires a Java-enabled browser. Tunnelier :http://www.bitvise.com/tunnelier.html
Commercial (free for personal use) SSH client for Windows with easy
tunnelling features, graphical SFTP client, FTP-to-SFTP bridge, etc. nph-proxy :http://www.jmarshall.com/tools/cgiproxy/
Free CGI-based HTTP proxy, capable of HTTPS proxying and URL obfuscation. Perl source code provided.
For more information, see:http://directory.google.com/Top/Computers/Security/Internet/Privacy/http://directory.google.com/Top/Computers/Security/Virtual_Private_Networks/ Tunnelling projects on SourceForge.net: http://sourceforge.net/search/?words=tunnel