how to workaround the great firewall of China
In order to access the sites blocked in China I have an account in sdf.lonestar.org which provide free shell account access (no root account of courese) that can be used to browse the web. This is what I do: ssh yuliansu@esmeralda:~> ssh weiwu@sdf.lonestar.org Last login: Fri Aug 4 04:00:29 2006 from pc216.broad.dyn ARPA Member Vote - Polls close 31-AUG-06 23:59:59 UTC - Type 'vote' to vote. you have 1 pending notification type 'notify -r' to retrieve it > lynx http://en.wikipedia.org/wiki/Solaris_(film) I have been using this method for years. lynx is a text based browser, I cannot 1. click to open a page, which is almost a killer feature for pages with 100 links (e.g. 99 links are navigation menu links, you need to press arraw-down 50 times to go to the correct link) 2. view the pictures I have always been thinking is there are good way to let my firefox use this ssh connection to display webpages. I think it's not possible... <dream> but there is still a small chance, I can run curl on the remote shell account, perhaps firefox can make use if that... </dream> Other people may suggest using a proxy server, which doesn't work for me because the great firewall of China is keyword text-based, it filters the content of webpage rather then only IP address or domain name, unless I am using SSL protected 'proxy', the pages had been in-accessible are still not accessbile with a proxy server. But so far I don't know how to find proxy servers that have SSL enabled. (or, can proxy server SSL enabled at all?) And I'd very much like to share experience (both how succeeded or faield) working around the great firewall of China. However if you are in China you will not see this email from mail archive websites, because it must be filtered. P.S. perhaps it is a good idea to start a project to set up a special software in Linux to let Linux transparnetly workaround the great firewall of China. This could be a very good idea because if we take a general solution that work for both Linux and Windows, Windows users may start to use it and gain attention from authorities (thanks to huge number of Windows users) and finally get this solution shut down by some means. However if this solution only (or mainly) work for Linux, thanks to the small number of Linux users, this solution can keep several years without getting forced down. This encourage people to use Linux too.
I have been using this method for years. lynx is a text based browser, I cannot
Heh. Don't get arrested.
I have always been thinking is there are good way to let my firefox use this ssh connection to display webpages. I think it's not possible...
Start a tiny webproxy on lonestar and use that.
Other people may suggest using a proxy server, which doesn't work for me because the great firewall of China is keyword text-based, it filters
sdf$ squid ... listen on port 1337 for example home$ ssh -CL 3128:localhost:1337 sdf.lonestar.org Benefit: Compression _and_ encryption while traversing China. Jan Engelhardt --
* Zhang Weiwu <zhangweiwu@realss.com> [08-06-06 01:33]:
I have been using this method for years. lynx is a text based browser, I cannot 1. click to open a page, which is almost a killer feature for pages with 100 links (e.g. 99 links are navigation menu links, you need to press arraw-down 50 times to go to the correct link) 2. view the pictures
2 texted based browsers (tiko) provide the ability to view inline pictures and navagate links, links (-g option) and w3m (configured to display graphics). You might have a look at them. -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/gallery2
On Sunday 06 August 2006 01:35, Zhang Weiwu wrote:
In order to access the sites blocked in China I have an account in sdf.lonestar.org which provide free shell account access (no root account of courese) that can be used to browse the web. This is what I do:
ssh yuliansu@esmeralda:~> ssh weiwu@sdf.lonestar.org Last login: Fri Aug 4 04:00:29 2006 from pc216.broad.dyn
Is it possible to do an X tunnel through your ssh connection? (use the -X option with ssh to allow the X tunnel.) If so, just ssh to your shell account and then start up firefox (or whatever graphics browser is available on your shell account)
On Sunday 06 August 2006 07:35, Zhang Weiwu wrote:
I have always been thinking is there are good way to let my firefox use this ssh connection to display webpages. I think it's not possible... <dream> but there is still a small chance, I can run curl on the remote shell account, perhaps firefox can make use if that... </dream>
You can *try* to do this: ssh -CX me@remotehost If the machine where your account is running supports X forwarding, and the machine has firefox/mozilla/netscape/konqueror/whatever installed, you can then run the browser. It is likely that the remote server doesn't have X11 installed, though (most hosted servers don't, in my experience). -- ----- stephan@s11n.net http://s11n.net "...pleasure is a grace and is not obedient to the commands of the will." -- Alan W. Watts
On Monday 07 August 2006 06:26 am, stephan beal wrote: <SNIP>
ssh -CX me@remotehost
If the machine where your account is running supports X forwarding, and the machine has firefox/mozilla/netscape/konqueror/whatever installed, you can then run the browser. It is likely that the remote server doesn't have X11 installed, though (most hosted servers don't, in my experience).
X forwarding is kind of slow and adds unneeded traffic overhead anyway. Jan Engelhardt's suggestion of starting a proxy on your ssh account and then using ssh tunneling would be the best. However, the proxy option may not be available on your ssh account either. You could still use ssh tunneling. Suppose you found an available proxy at proxy.somewhere.com running on port 3128. Next suppose you had ssh access at ssh.anotherplace.com. You could do something like this: ssh -L 3128:proxy.somewhere.com:3128 ssh.anotherplace.com After logging on, minimize your ssh session and start your browser. Set your browser up to use a proxy at 127.0.0.1 (or localhost) and port 3128. -- Louis Richards
在 2006-08-07一的 10:54 -0400,Louis Richards写道:
On Monday 07 August 2006 06:26 am, stephan beal wrote: <SNIP>
ssh -CX me@remotehost
If the machine where your account is running supports X forwarding, and the machine has firefox/mozilla/netscape/konqueror/whatever installed, you can then run the browser. It is likely that the remote server doesn't have X11 installed, though (most hosted servers don't, in my experience).
X forwarding is kind of slow and adds unneeded traffic overhead anyway.
True, besides, the remote server don't have X installed.
Jan Engelhardt's suggestion of starting a proxy on your ssh account and then using ssh tunneling would be the best. However, the proxy option may not be available on your ssh account either.
Ah, true. I don't have proxy option...
You could still use ssh tunneling. Suppose you found an available proxy at proxy.somewhere.com running on port 3128. Next suppose you had ssh access at ssh.anotherplace.com. You could do something like this:
ssh -L 3128:proxy.somewhere.com:3128 ssh.anotherplace.com
After logging on, minimize your ssh session and start your browser. Set your browser up to use a proxy at 127.0.0.1 (or localhost) and port 3128.
The hosting company even disabled TCP forwarding for my ssh account,. Ooops. Now I give up the idea of making use of the ssh account I have. Now I am trying playing with 'tor' <http://tor.eff.org/> I still didn't make tor work for sites like wikipedia yet. Besides, do you have better recommendation over tor?
-- Louis Richards
-- 锐业软服(国内业务) http://www.realss.cn Real SoftService http://www.realss.com 销售咨询(Sales Department): 0086 592 20 99987 (Chinese, German, English) 国际业务(International Sales): 0086 10 8460 6011 (German and English) 联系:厦门大学科技园,嘉庚二号楼6楼 邮政:厦门大学2312号信箱(邮编361005)
participants (7)
-
Bruce Marshall
-
Jan Engelhardt
-
Louis Richards
-
Patrick Shanahan
-
stephan beal
-
Zhang Weiwu
-
张韡武