Re: My home ISP blocking ssh protocol

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============7658647573691041946==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="ex2agVaWEhqS57KoFowWkgiKLFk5x2PGz"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--ex2agVaWEhqS57KoFowWkgiKLFk5x2PGz
Content-Type: multipart/mixed; boundary="uETeNp9qq1tgbRZoOuaNoZOm1eyv7F0SS";
 protected-headers="v1"
From: Christopher Schultz <[email protected]>
To: [email protected]
Message-ID: <[email protected]>
Subject: Re: [stunnel-users] My home ISP blocking ssh protocol
References: <CADn9Oo2-CvAUAqojP2=nNsOQyZ85NhRpr52hPoKg42fSMF1wRA@mail.gmail.com>
In-Reply-To: <CADn9Oo2-CvAUAqojP2=nNsOQyZ85NhRpr52hPoKg42fSMF1wRA@mail.gmail.com>

--uETeNp9qq1tgbRZoOuaNoZOm1eyv7F0SS
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Matt,

On 12/11/19 17:53, Matt Thomas wrote:
> I need to know if Stunnel is going to accomplish what i need to do. My
> home ISP blocks protocol HTTP and SSH from coming in so that people can=
t
> run their own website from home without paying the ISP for a "Business"=
 line
>=20
> All i am trying to do is have a SFTP server that i can access my dang
> files from while i am at school, work, friends house, library or
> wherever. I have tried ssh on multiple random ports and made sure all
> firewall rules and port forward rules were correct in my home router. I=

> know they work because i even went as far as setting up a minecraft
> server to just test the port forward rules out and sure enough, my
> friend 200 miles away can connect just fine to my home minecraft
> server.. But he can not connect to the ssh server. No logs are ever
> created on the server either because something is stoping the packet
> from even hitting my router, that something is my ISP
>=20
> Would stunnel allow me to make ssh traffic look like regular https
> traffic, thus allowing me to connect to my server at home so i can do m=
y
> homework??

Those other servers probably use TLS or plaintext connections. stunnel
uses TLS, but ssh/sftp use a slightly different protocol that may
possibly be distinguishable by a determined ISP.

I would think that using stunnel to tunnel SFTP/SSH would be possible,
though not strictly necessary. I suspect some other problem is
preventing you from succeeding.

Can you be more specific about exactly what you did for configuration?
Port numbers, specific things you did, etc? You don't have to disclose
your public IP address, but perhaps give the local IPs of your router
and home server, etc?

-chris


--uETeNp9qq1tgbRZoOuaNoZOm1eyv7F0SS--

--ex2agVaWEhqS57KoFowWkgiKLFk5x2PGz
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=fCJR
-----END PGP SIGNATURE-----

--ex2agVaWEhqS57KoFowWkgiKLFk5x2PGz--

--===============7658647573691041946==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

--===============7658647573691041946==--