On Sun, 26 Sep 2004, Michael Renner wrote:
We had a NAT/Masquerade network before, with open ports 80 and 443. The users are not allowed to do anything else than http and https. But they are clever enough to tunnel ssh (or much more: pppssh-tunnel) through the open ports.
So we closed the ports and made this transparent proxy.
They will still be able to tunnel SSH over https.
Regards Henrik
