How Do U Get Around Websense!?!
 

Company installed freaking Websense and I can't access any of my internet based e-mail accts because they are filterd. I was able to get around that by using various webaddresses that the filters didn't screen but alas those eventually were blocked. i primarily need to access gmail. Any way around this?

I would even set up another e-mail based acct if it is not on the websense filter and have my mail forwarded to that address.

Suggestions?

While back, I obtained a list of free proxy servers (just do a search). I used these proxy servers to get to sites like Yahoo mail and hotmail. Because they are free, some servers are better than other in terms of speed. That's why I maintained a list of them.

I'd be VERY VERY careful about doing end runs around Websense. In some cases, you could be terminated over it. Talk to the IT department and ask if there's a policy against accessing those Email accounts. If not, ask for them to stop filtering it. If so, assuming you have XP Pro at home I'd set up Remote Desktop on my home computer and do my Email checking and browsing through there. You don't need much bandwidth for it to work well, 256k upstream should be enough so if you have broadband you should be set. Just set up a DynDNS client on the computer and register a DNS name, that way you can always find your computer. That also will allow you to browse as you please, since the traffic will be between your IP address at the office and at the house and won't be traceable or filterable from work.

Be careful to check that your company allows outbound Remote Access sessions, however. They occur on a specific port so it is easy for the IT department to set up an alarm when that port is used. Many IT departments see outbound Remote Access as a security threat both because a virus can use it as a backdoor and because employees can use it to circumvent tracking and web blocking systems the company has put in place, as described above.

Since Websense is made to NOT get around, the IT staff are your only hope. Messing with it is not a wise thing to do.

You need to check out Knoppix. It's a bootable CD that has everything you need to get on the Internet. Since you boot to it, it bypasses everything that's installed on your hard drive.

http://www.knoppix.net/

The great thing about this... Once you take out the CD and restart your PC, all of your browsing history is gone. It's not stored on your PC.

And how will that help get around a firewall? Websense isn't installed on the PC, it is a device on the company LAN so unless he also has access to a non-firewalled network connection (which would kinda defeat this entire thread) then Knoppix ain't going to help at all.

My bad... I assumed he/she was on a laptop and traveled around like the rest of us. Forced to log into a Company VPN, etc.

Websense is hooked in at the perimeter firewall level, usually. The firewall inspects http requests and sends the url to the filter server farm and then either allows or denies the connection. Websense does support exclusion lists, but, your admin would have to add you to that.

Various methods I've seen folks use to get around it include ssh reverse proxying to your house, remote desktop to the house, an http proxy, vpn to the house. All are trivial to setup, just be careful that you're not violating osme company policy in the AUP you probably signed when you were hired.

Maybe see about accessing gmail with your data plan on your phone? I believe they have a 'small-HTML' version for phones. But I use my Treo 650 with Versamail to avoid using my work laptop for that.

When I had my Samsung a500 phone, I paid $2.19/month for a simple pop3 email program for it, not through the microbrowser but through Verizons get it now functionality. It was great for reading text-only email, I could reply if I really had to (but it was a pain), but most important it let me at least know the subjects of my email.

Gmail Is Pop!!!
 

Just use Outlook Express and you can check it using the pop settings. i think you can even do this thru your outlook.

GMAIL is the only free POP based email i am aware of....

Yes, but, if his company is blocking access to web based email systems, it's highly likely they've shutdown outbound POP, IMAP, and/or SMTP access on the same firewalls that run websense.

The suggestion to use his phone was because the phone does not use the corp internet connection to download mail.

Gmail uses a nonstandard pop port.

How to get around websense
 

First let me say that if your company has installed a filtering product, you place yourself at risk of reprimand or termination for violating the filtering policy. Be it on your head then if you choose to take the following advice:

1. Use pop. Gmail supports pop access and if the only thing the company has deployed is websense, then pop access will remain unblocked.

2. Use a tunnel. Configure an ssh and proxy server on your home machine. Establish an ssh connect from your work machine to your home machine, forwarding all web connections through the tunnel on the port the proxy server is listening.

3. Use an out-of-band network. Depending on the location of your office, or your commitment to access. You might be able to utilize an open wireless network in another building/area that is not websense filtered. Alternatively you can utilize a blackberry device to pop your email (both from the device and via a serial connection to your work machine). Alternative to this would be to buy an EDGE card and plan from one of the cellular provides and access the network through this.

Try this and lemme know...
 

First of all, I want to echo the feedback you are getting, that you could be putting a lot at risk by trying to bypass websense at work.

Having said that, a few weeks ago, I read in my local newspaper, that a way to bypass this to get to some sites, is to have google translate it.

http://www.google.com/language_tools

If you choose e.g. German to English and put in an English website URL, it'll still show it to you in English and the URL that comes up, is that of google.

**I haven't tried this myself - coz i didn't have the need to**. but at the time I read it, i thought it was pretty interesting.

Anyways, try this and please provide feedback on whether it works (Websense is one of the best in the industry, though).

Good luck (both with getting thru and keeping your job :p )

-R

995 is the standard port for pop over ssl.

Sorry,,,,created separate thread....

Yahoo!Mail is (kinda) free.

http://dbeusee.home.comcast.net/

getting around websense
 

I know of two ways to get around websense. The first is the one where you copy and paste the url of the site you want to go to into google languafe tools and translate it from german to english. It will then take you to the site you wish to go to.
The other way i know also uses google and all you have to do is search for the site you want and then hit cached wich is under the description of the site and is a clickable blue font.
These ways should work altho lately websense has increased their security persay and there are some problems. So you can try them out and hopefully it will work. ^

Welcome to FlyerTalk, pguns5!

You forgot the 3rd way... talking to the IT department about allowing you to access the sites you need and why you need those sites. I've found that most places make the Websense rules strict when they first install Websense because of people surfing the web when they should be working.

Something to consider (and ask the IT department about) would be the use of gotomypc.com to access your home PC. That way, while you'd be checking your email, you wouldn't actually be checking it with a corporate machine, and thus not exposing the corporate machine to anything they don't want on their network.

That may not matter, but I can name at least a few companies that would be fine with that.

Steve

If you can't get them to give you permission to access your web mail, then the above is the best overall solution and the only general one. They will be able to tell that you're making an outbound ssh connection but they won't be able to see what you're doing with it. :cool:

They can shut down your ssh port of course but you can just switch to a different one. If they start playing whack a mole with you then forget it, you're not going to win and you probably WILL get in trouble. But then again if they spend their time on that they are psychos who need their heads examined. @:-)

/pbz

A good alternative to this, which I've successfully used to access my home PC is called LogMeIn.com, and is free - unlike Gotomypc....

Just a thought, Dave

I use both gotomypc and have used logmein in the past to connect to home and use that machine.

I would first ask they allow access, it's quite possible they are running with the default database and will be more then willing to open it up for you. I would, unless it became a problem.

They installed it on the system for a reason. Going around it without their OK is a very bad thing, it could be grounds for being unemployed here if you get caught. Unless you have a private office, somebody will see you on a page they can't get to and ask IT to fix their machine too, and you are burned.

Our firewall software (can't remember what it is) will sometimes allow you to request that a blocked site be unblocked. My biggest problem is that it blocks flyertalk.com!!! Any other discussion type board I have ever hit is open, but FT is blocked and has valid business purposes. I've requested it be opened, but no response after several months.

One of these usually get me in...

http://www.ocrig.com
http://www.proxy.org
http://www.teradazzle.com
http://www.unblockworld.com
http://www.publicproxyservers.com