This guide is intended for:
· Employees that have blocked access to some web sites and want to access them in the work-place – of course after manager approval, otherwise it is illegal;
· Employees that have blocked access to all web sites, but company and/or partner web sites and want to access them in the work-place – of course after manager approval, otherwise it is illegal;
· Home users that need a secure tunnel to another place and surf encrypted;
· Home users that want t cheap VPN;
· Cool people that like this kind of stuff
It is common for many companies to block internet access for the employees.
Sometimes internet is blocked for all the web sites – sometimes only some web sites are filtered, for example YOUtube and FaceBook or Skype are usually blocked by the IT staff of most corporations.
Sometimes internal policy wants it blocked, but if you want to use internet even with this filter you can use this guide.
You must get the approval of your manager (because some employees may have some privileges) before going through this guide otherwise the company may take legal actions against you for “surfing the web against the policies”.
Home users sometimes need to surf anonymously from some locations. Home users that go to some place and do not trust this place, they can use this guide to build a cheap Virtual Private Network to surf safely from every place in the world… how?
Encrypting all the traffic between the place where you are and your home! Nobody can capture and read what you do between your place and your home, and with a very easy tuning you can also encrypt the DNS requests so that hackers cannot find out what web sites you surfed.
This is what I have tested and it works perfectly:
You need:
Linksys WRT54G/GL/GS (in this example I use WRT54G)
Firmware: DD-WRT (in this example I use DD-WRT v23 SP2 (09/15/06) std (SVN revision 3932))
1 internet connection with a public IP address
Access in/out to one port, for example port 22 from the place where you need to use the secure connection – remote. (if you need assistance in finding an open port, please contact the experts at www.security-exchange.net.
This is my Linksys:

You need to change the firmware of your Linksys to the DD-WRT firmware, which can be downloaded here. www.dd-wrt.com
In the back of your Linksys you have 4 LAN ports and 1 WAN port. You need to connect the internet cable to the WAN port. If you want, you can also connect to it home computers to the LAN ports and/or via wifi.
Please configure your Linksys router so that internet works and your home computers work as well.
If you need help configuring your router you can write for free to our experts at www.security-exchange.net – you will receive help very fast in the forum
Tunnel Configuration:
When your Linksys is up-and-running you are ready to start the tunnel configuration.
1. Go to the management page of your Linksys router – usually is http://192.168.1.1
2. Go to the Administration panel
3. On the Remote Access field enable SSH Management
4. Choose a SSH Management Port – The SSH Management Port needs to be the same open and reachable from the remote place (for example from your work place)
5. Click on Save Settings
6. Go to the Services tab
7. In the Secure Shell field enable SSHd and Password Login
8. Choose the same open SSH Management port that you have chosen before
9. Choose a Password
Here I show you how the configuration of my Linksys looks like:
1. You need Firefox (it is not a must, but I suggest it to you – Internet Explorer is also ok)
2. Download Putty from www.putty.org
3. Configure Putty:
4. Create a text file with your Notepad and put the Public IP address and port as in the following example:
This example would be good if the public IP of your Linksys is 10.100.10.30 and if the chosen SSH management port is 22.
5. Then save the file as ssh.bat – or rename it from ssh.txt to ssh.bat – please put the ssh.bat file in the same folder of your putty.exe – otherwise it won’t work
6. Double click ssh.bat
7. You should now see a message saying “Login As:”
8. Put the username that you need to use when entering the Linksys configuration and press Enter
9. Put the password that you need to use when entering the Linksys configuration and press Enter
10. You are now connected
If you have Firefox what you need to do now is to configure Firefox:
· Go on the connection settings and set the following:
In FireFox go to Tools –> Options –> Advanced –> Network
FireFox Settings
Select Manual proxy configuration
SOCKS Host: localhost Port: 8080
SOCKS v5
No Proxy for: localhost, 127.0.0.1
Now your browser is connecting to your home computer with a secure connection, if somebody sniffes the packets, they are encrypted and unusefult for the “hacker”…. but…
They can still check what web sites you are surfing… if you want the TOTAL privacy you should use FireFox and do the following.
1. Type about:config on the address bar… of course, press ENTER
2. You are now in the configuration panel of FireFox, look for network.proxy.socks_remote_dns
3. Set this value to True
Before activating this settings all the DNS requests were still processed by your originary internet, for example the unsecured WiFI… From now on all the DNS requests are sent via SSH secure connection, so your home computer will send the request for the address-ip resolution.
You can apply the same settings for other applications like eMule, Skype…
I would add that if you had forbidden the access to facebook or youtube, you can now surf facebook or youtube without any problem using your home internet connection.
If you are running FireFox and you have applied the network.proxy.socks_remote_dns it would be almost impossible for everybody to understand which websites you are accessing.
If you have any questions or you need help, please write to our Security-Exchange.net forum – it’s free and you get a fast answer
Our Help Forum = www.security-exchange.net








2 Trackback(s)