Main » 2011 » Март » 16 » Dns tunneling via iodine the cheese is really free
12:56
Dns tunneling via iodine the cheese is really free
There are:
disconnected for nonpayment internet (adsl, lan, etc)
or
unencrypted wi-fi network c closed internet, but working dns
or
very strict firewall to open dns

I want:
Full Internet, even if very slowly

Before answering the question "how?" - a few comments.

1. This paper - a practical guide, not a theoretical course "Introduction to the features of the Services DNS» (on this subject and it is written enough).

2. All examples are platform-windows, as the most popular on the desktop. On the other hand, all the above methods work better than in the unix-environment (google easily tell alternatives out there, where I mention windows-only solution).

3. To the method described to work, you need as your server is constantly running and connected to the Internet with "white» IP (does not matter, either static or dynamic, but the addresses of the form 192.168 .*.* or 10 .*.*.* will not do).

4. Hey, provider guys! NSTX, which uses a similar method has been known for about 7 years, but still so far in most networks, this trick works. Now "under Windu" is a turnkey solution. " Protect dns'y:)

Introduction

In all cases listed in the beginning, there is only one loophole - dns-server to which you can usually "get through". What gives us the dns server? In theory - the opportunity to send a request to any content on any other dns-server (already outside the "closed / off" zone) and get any answer. Theoretically, this allows access to the network by encapsulating IP packets in the dns requests and responses. Now I'll show you how to do it in practice.

Part 1. Register
  • registering for the service dyndns.com
  • Set up own dynamic dns, select the address (say, dnstun.dyndns.org)
  • registering for the service co.cc
  • Registering yourself from them free domain (say, dnstun.co.cc), and indicate to him dns server our dyndns-name, dnstun.dyndns.org (if such a method does not work, you can add to the domain nx-record for its subdomain, refer to our dyndns- domain is done in the «Zone Records», for example, host: tunnel.dnstun.co.cc, type: NS, Value: dnstun.dyndns.org ", and in the future instead of always using dnstun.co.cc tunnel.dnstun . co.cc)
  • We are waiting for domain delegation and the appearance of it at all dns servers (48 hours)
Part 2. server (ie the computer, which is located in the wider Internet, without any firewall, etc.)
  • Download and install the dyndns updater:
    www.dyndns.com/support/clients/
  • Download and install the TAP driver from the package OpenVPN:
    openvpn. net/release/openvpn-2.0.9-install.exe
  • Download the latest build iodine:
    code.kryo.se/iodine/iodine-latest-win32.zip
  • Start the server iodine:
    iodined-f 10.0.0.1 dnstun.co.cc
  • With kerio or built-in windows create a general Internet access to newly emerging network connection (via the virtual adapter TAP-Win32 Adapter V8)
Part 3. The client (the computer from which the entire Internet is available only dns)
  • Download and install the TAP driver from the package OpenVPN:
    openvpn.net/release/openvpn-2.0.9-install.exe
  • Download the latest build iodine:
    code.kryo.se/iodine/iodine-latest-win32.zip
  • Start the client:
    iodine-f 92.162.2.72 dnstun.co.cc
    Here 92.162.2.72 is the IP address of any available dns server
    (namely IP, write ns1.provider.ru not - will not work).
    Read IP dns servers installed in the system, it is possible for the team
    ipconfig / all
  • It now remains to set up routing so that all packets except those that go to the dns server, is turned on again raised a virtual interface. This is - homework. Hint.

PS It is and under maemo, and a win mobile.
PPS intelligent reader would guess that all that really worked well, we must also correct MTU in the registry.

UPD: reference for those wishing to participate in the development of iodine
Views: 2067 | Added by: w1zard | Rating: 0.0/0
Total comments: 1
1 Nel  
0
thank you. i will try this solution.

Имя *:
Email *:
Код *: