Live data from Hacker News

Transparent proxy server that works as a poor man's VPN

github.com

21–25 of 25 posts

Re: Transparent proxy server that works as a poor man's VPN

#22
post #3

Earlier quoted context omitted.

Doesn't work on Yosemite!

It does. It was updated a couple of months ago to use the new pfctl framework of -E/-X to enable/disable the firewall and uses the existing hooks in the firewall to automatically insert/remove rules as necessary. I've used it extensively on Yosemite.

Using this fork on El Capitan now.

Re: Transparent proxy server that works as a poor man's VPN

#23
post #20

Earlier quoted context omitted.

sshuttle is really cool, except both macs I've run it on would have weird system crashes while running it. I ended up creating a proper VPN via a microtik router and have enjoyed the superior performance compared to sshuttle, though it was several orders of magnitude more effort to get going! sshuttle was almost too easy to get up and running :)

A python script should not be able to make your Mac crash (depending on what you mean by "weird system crash"). If it actually causes a hard crash, that likely either points to a weird hardware/software problem on your system, or it's a bug that Apple would like to know about if they don't already.

Using it consistently produced hard system freezes.

Re: Transparent proxy server that works as a poor man's VPN

#24
post #12

I love sshuttle. You can point it at any ssh server (that has python installed on it) and you don't need any special privileges on the remote end. One problem is that it does not support DNS tunneling if FreeBSD is your client.[1] Item: we (rsync.net) would be willing to pay for development that gets sshuttle to work properly and bulletproof on FreeBSD. In fact, we would be willing to pay for sshuttle development in…

If you fork on github, you get the README with your fork. You have to actually go and edit it for it to be different.

Right, sure - but given that the readme has the authors personal backstory and his name and email, it surprises me that the forks author did not fix that up.

Re: Transparent proxy server that works as a poor man's VPN

#25
post #4

I used this for a while in summer while I travelled to China, it worked shortly before the powerful GFW blocks it deadly, along with openvpn-over-443-port etc that I tried, which also failed soon after it's used for a short while.

The great firewall won't block tor bridges on port 80 or 443. I've been there a time or two and used it :D

it does, 443 still leaks pattens(e.g. packet length and when/how they're sent/received,etc), that GFW can detec and tell if it's a typical 443 or openvpn-over-443. also 80 has no security at all and I don't know what it can be used for this purpose.
Post reply on HN