Live data from Hacker News

Tunneling Data and Commands Over DNS to Bypass Firewalls

zeltser.com

1–10 of 36 posts

Re: Tunneling Data and Commands Over DNS to Bypass Firewalls

#5
post #4
post #2

Don't tell anyone, but I did this on a plane ;) It was fickle, but I imagine you could build an entire protocol on top of DNS.

wait, you could bypass the inflight wifi's paywall by using dns tunneling?

You can bypass essentially all paywalls using DNS tunnelling. The connection you get has _terrible_ bandwidth and latency characteristics, which is why nobody does it.

Re: Tunneling Data and Commands Over DNS to Bypass Firewalls

#6
post #5
post #4

Earlier quoted context omitted.

wait, you could bypass the inflight wifi's paywall by using dns tunneling?

You can bypass essentially all paywalls using DNS tunnelling. The connection you get has _terrible_ bandwidth and latency characteristics, which is why nobody does it.

Not entirely correct.

This doesn't work for many hotel paywalls, because they would have a catch-all rule for all DNS A queries (resolving to a local IP of authenticating proxy) and block everything else. And the reason is exactly because of the DNS tunneling, which was making rounds in p2p circles as far back as 2005 if not earlier.

Re: Tunneling Data and Commands Over DNS to Bypass Firewalls

#8
post #5
post #4

Earlier quoted context omitted.

wait, you could bypass the inflight wifi's paywall by using dns tunneling?

You can bypass essentially all paywalls using DNS tunnelling. The connection you get has _terrible_ bandwidth and latency characteristics, which is why nobody does it.

Last time I checked which was about 2 years ago, I've started seeing paywalls that blocked DNS.

Re: Tunneling Data and Commands Over DNS to Bypass Firewalls

#10
post #5
post #4

Earlier quoted context omitted.

wait, you could bypass the inflight wifi's paywall by using dns tunneling?

You can bypass essentially all paywalls using DNS tunnelling. The connection you get has _terrible_ bandwidth and latency characteristics, which is why nobody does it.

Yea, it was pretty bad for me. I did manage to establish an ssh connection over that, but it would get dropped pretty fast. I'd setup L2TP on the host if you want to browse the web, it might just about work. The connection itself is not that bad, I actually paid for it eventually and it was okayish. I'm pretty sure with a bunch of adjustments you could get it to a point where you can use some IM comfortably.
Post reply on HN