Path: ...!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!tncsrv09.home.tnetconsulting.net!.POSTED.omega.home.tnetconsulting.net!not-for-mail
From: Grant Taylor <gtaylor@tnetconsulting.net>
Newsgroups: news.admin.peering,news.software.nntp
Subject: Re: Young people peering
Date: Fri, 19 Apr 2024 09:33:39 -0500
Organization: TNet Consulting
Message-ID: <uvtvc3$tkt$3@tncsrv09.home.tnetconsulting.net>
References: <uvgh5a$1d8l$10@gallifrey.nk.ca> <uvmi06$13lru$1@dont-email.me>
 <uvmqk6$2cgt$8@gallifrey.nk.ca>
 <ddbb045d7ec304cb6220e93b1193901b@www.novabbs.org>
 <uvrdna$2aqml$3@dont-email.me>
 <8e2e1be946bb6c4c8e010f84674397cc@www.novabbs.org>
 <uvrh7o$2bin1$2@dont-email.me>
 <e794f5efa2a852189c1f3e7bded88fd2@www.novabbs.org>
 <uvrntr$rdh$1@tncsrv09.home.tnetconsulting.net>
 <uvt5h1$2pu7l$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Fri, 19 Apr 2024 14:33:39 -0000 (UTC)
Injection-Info: tncsrv09.home.tnetconsulting.net; posting-host="omega.home.tnetconsulting.net:198.18.1.140";
	logging-data="30365"; mail-complaints-to="newsmaster@tnetconsulting.net"
User-Agent: Mozilla Thunderbird
Content-Language: en-US
In-Reply-To: <uvt5h1$2pu7l$1@dont-email.me>
Bytes: 2493
Lines: 29

On 4/19/24 02:12, Marco Moock wrote:
> Until they heard of SSL-VPN (via TCP port 443). That can be easily 
> implemented in ocserv on Linux and looks like normal web traffic.

Except for the fact that the school used a TLS bumping proxy and you 
couldn't initiate TLS traffic without passing through the bumping proxy. 
  The bumping proxy could effectively block TLS VPNs.

Access to the Internet is not the same as being on the Internet.  The 
school computers had access to the Internet.  Access that was easily 
filtered / blocked.

Trying to usurp the filtering garnered an unpleasant conversation.

It was more pleasant to try to connect to a site, find out it was 
blocked, fill out the form to request it be unblocked, and follow the 
process.

Sometimes they would allow a student to use a teacher's computer (or the 
teacher could sign in to a student computer / proxy) and the teacher 
could supervise what the student was doing.

It worked well, it provided the desired access to the Internet, and it 
provided a reasonable amount of protection using the technology 
available at the time.



-- 
Grant. . . .