Aces Quick dark print for class, including duplex Card spaces incorporate CompactFlash 2,400ppi scanner Cons iPrint photograph came through in strips Somewhat fluffy print on plain paper Finish driver download required Key Features Survey Price: £146.00 Duplex print as standard Separate controls for each capacity Front-mounted paper tape Coordinate email print by means of Epson iPrint 63mm shading LCD show Epson's Stylus Office go is intended for SOHO clients and most models give fax capacities. Many, similar to the BX635FWD, investigated here, additionally incorporate great photograph bolster, so individuals who require an across the board for the two undertakings are all around upheld.

Privoxy Proxy

This is a major, square-cut machine for an inkjet across the board, yet extensively bended edges to its Automatic Document Feeder (ADF) calm the lines and the overlap out ADF plate/cover facilitates. The 2,400ppi flatbed scanner has a well-sprung cover, which opens past the vertical for simple stacking, however doesn't have growing pivots to help check books and magazines. The control board, which pivots up from the front essence of the printer, has a strange structure, with regards to the diverse capacities it controls.

Every one of the four fragments – Photo, Copy, Fax and Scan – has its very own Print or Start catch (two for Copy and Fax, to accommodate dark and shading). This is sufficiently coherent when you understand it, however it takes a touch of getting utilized, when most holding nothing back ones offer a couple of huge Start catches between all capacities. Beneath the control board is a fairly larger than average yield opening, with a three-organize, adaptive plate to help pages. These are sustained from a solitary, 250-sheet tape, which loads from the front of the machine. In the event that you need to print photographs, you have to change paper in the tape, as there's no different photograph feed. In the left-hand corner of the front board are attachments for SD, MemoryStick, xD and, strangely nowadays, CompactFlash cards. The four ink cartridges plug into the lasting print head, gotten to by pivoting up the scanner area, and there are attachments in the left-hand side of the printer for USB and 10/100 Ethernet association.

You'll miss some fun, however, on the off chance that you don't utilize the printer's remote association, as Epson has joined HP and Kodak in offering direct remote print, through an email deliver doled out to the machine itself. We attempted this from a Samsung Galaxy Mini and it got and printed the email accurately, in several minutes, however the joined photograph was imprinted in 2mm strips on discrete sheets, which was frustrating. We expect it's a glitch in the setup, however on the off chance that you have comparative issues, let us know. Decision As a mainsteam, SOHO across the board, the Epson Stylus Office BX635FWD ticks the vast majority of the containers.

With duplex print, fax, photograph transfer and now coordinate print, it can deal with a large portion of the employments that are probably going to be asked of it. Print quality on plain paper is dependably an exchange off against speed, and this machine certainly veers towards speed, however fulfillment depends how intently you take a gander at your printouts.

We’ve been linking to a couple proxy options in the links posts recently and tom thought it would be a good idea to write up how to use. In tom’s case he wanted to route all of his internet surfing at work through an encrypted tunnel to his home machine. The guide is Windows based, but it won’t be to hard to translate to your OS of choice. It starts by setting up an server and new user on the home machine.

Then Privoxy is installed. Next is used to establish the secure tunnel from the work machine. The last step is to configure the browser to use the proxy. You can use this for IM too.

You may not need this at work or school, but it should offer you some decent protection if you’re out using open access points. Posted in Post navigation.

8: The encryption is pretty secure. Most versions of SSH and the most current version of Putty can force the highest levels of encryption for the traffic that goes back and forth. As was stated before, the biggest concern here is using your work or school’s network’s DNS, they can see where you are going, but they can’t see what you are doing when you are there.

With Privoxy, this becomes kinda moot, but you need to be a local administrator to install Privoxy properly, otherwise you will be leaking DNS requests to the local network. Trillian and Portable Firefox work fine off of a thumbdrive, Putty does as well but does leave a small registry entry on the local machinenot a big deal because it doesnt save a password in that or anything (unless you specifically tell it to.) An administrator can.see. what you are trying to accomplish, a well trained administrator knows that you are using SSH if you leave Putty set to a default port, if you change it he/she might be able to tell because they see the DNS request in their logs and then a bunch of encrypted traffic.

Worst they could do is lock down a bunch of ports, but worst comes to worst you can use port 80 or 443, which most admins don’t block (unless they just don’t want you using the web of course.) Trillian (at least version 3) has an option to forward all of it’s name requests through the proxy, so they can’t tell you are using it unless they see it on a local machine. Firefox (as of yet) doesn’t support forwarding it’s DNS through the proxy, even though the SOCKS protocol (v5) supports it. Supposedly, the Deer Park builds have an option to enable DNS lookups through the proxy (and future public full releases probably will too) but from what I can tell 1.06 does not. I searched to see if someone had written an extension that would tell Firefox to use DNS through a proxy, but I haven’t found one yet and I’m not sure if it’s technically possible. 10: you’re slightly misinterpreting the howto. Privoxy is run on the SSH server (ie the machine at the user’s home) which presumably the user has admin rights to. You don’t need to install privoxy locally on the client machine — all you need is PuTTY and a web browser.

SOCKS4 proxies (and firefox using SOCKS5, assuming you’re correct) leak DNS requests. But HTTP proxies don’t. I’ve just fired up ethereal and double checked this. Web requests from IE generate DNS requests (light blue by ethereal default). Web requests from firefox, which is currently using privoxy across the SSH tunnel, don’t leak any DNS info. So I believe users should feel secure in their web browsing. I’m no ethereal expert, though, so if someone can confirm it might be a good idea.

Finally, someone in comments at my site suggested using 443, which is usually open and typically used for encrypted SSL traffic. It’s also less likely to attract the attention of script kiddies or your ISP. It’s still pretty easy to tell SSH traffic apart from SSL traffic, but it at least won’t stick out quite as obviously. Hey tom, I just posted this on your site as well, but I used the instructions at: for using public/private keys with Putty and OpenSSH. I use a nonstandard port because I was getting hit by Chinese hacker-idiots whether I ran the server on port 22. I didn’t think to use 443, but for now the port I’m using isn’t blocked at our corporate firewall.

I’m sorry I misunderstood the Privoxy commentI had been running Privoxy in combination with the Tor network when I surf from hotspots and had it in my head you were using it on the local machine. Running Privoxy locally doesn’t leak DNS, as far as I’m aware, and I’m not totally sure what the benefits are of running it on the server side? You’re right about socks5 — it IS capable of forwarding DNS requests, based on what I’ve read. It’s just that very few apps use it properly, and instead do their DNS resolution, then pass the resolved IP to the socks5 proxy. This is why the Tor howto has you use privoxy in between your browser (which leaks DNS requests when using a socks server) and Tor (which is a socks server).

Privoxy is smart enough not to leak its DNS resolution requests, and uses socks5 properly. As you said, socks4 can only handle IP addresses, so it always leaks however, socks4a (which is what privoxy technically is, I believe) uses domain names in the requests, so when using one of them you never leak (I think). Anyway, the punchline is the same: this particular setup doesn’t leak DNS info. And yeah, I see where you’re coming from on the Tor thing — I’ve used that setup before, too. It’s a good one, although there are more and more sites that block traffic from Tor nodes cause of all the abuse that comes from them.

It sucks to get random permission denied messages, depending on what node your request is going through. Also, having google assume you’re in germany (because that’s where your exit node is located) can be confusing. This setup doesn’t provide anonymity from anyone but your school/boss, but it avoids many of the headaches of Tor. As mentioned, socks proxies usually leak dns requests. Your messages will be secure, but snoopers are able to identify their destination.

Also, the other tutorial just assumed you had access to a socks proxy. Okay, so tor is there for you to use, but otherwise that’s not necessarily a good assumption.

Your home connection’s availability and bandwidth can be controlled by you. It’s also clearly legal to use, unlike the unsecured proxies that you’d probably end up using with the other tutorial. 28: you can run ssh tunnels over a proxy, if your company makes you use one. Check the settings in PuTTY; it’s pretty straightforward. I have long used SSH to tunnel out over port 443 and access my home linux server. I can then tunnel all types of other services (e.g., vnc, mail, nntp, etc) over the SSH link. I use 443 since it is almost always open.

However, recently a lot of places seem to be implementing SPI firewalls which block ssh traffic on port 443. There seem to be several workarounds mentioned here and elsewhere that allow you to set up an ssl tunnel instead, including stunnel, openvpn, and corkscrew (all mentioned above). I am looking for the easiest way of setting up an underlying ssl tunnel over which I can then run my usual ssh tunnel.

I want this to be as transparent as possible so that when there is no spi firewall I can just run ssh and when there is one I can set up an ssl layer underneath. What is the best program to use to do this? I just wanted to add in my findings- Firefox Deer Park (1.5 Beta1) does have the setting to allow dns requests to be forwarded to socks proxy. Type about:config, then type proxy into the filter. The setting to change is: network.proxy.socksremotedns I have found that using that or privoxy, both still leak some dns requests. I haven’t been able to figure out the ryhm or reason behind why or what causes it to happen.

I Noticed it while testing my config at work using ethereal. If anyone can shed some light on that, I would be most grateful. I also wanted to mention that I find tor a bad choice to use at work because of all the connections it opens (run netstat while tor is running). This is a quick tipoff to admins that you are using anonymizing software, unlike using ssh on port 443 which is better blended with normal traffic. IRT # 38 – this is the still the weak link in the whole proxying issue. Running SSH over 443 will still alert (I am a network security engineer at an enterprise facility). All of this will beat WebSense, but leaking DNS queries and running unexpected proxies will eventually be found.

The real key to being truly hidden is to make a true SSL connection then tunneling the requests through thatnot just porting SSH over 443. Almost as good would be to just do http through http tunneling over port 80so long as there are no DNS leaks. The true destination of your surfing is present inside the tunneled packets, but WebSense/Cisco/etc will not pick it up, and there is too much port 80 traffic on the network to try to look over it all.

One last thing.if your network guys are really savvy, they can set up alerts for port 22/80/443/. connects that don’t have an associated DNS query to go with. To beat this, you might want to have your proxy have a legitimate URL. At my job, if I see any TCP connects going out without an attached DNS query, I get a little suspicious and usually look into it.

Apologies if i miss the specifics, i am not as technical as you guys. I work for off-site a company but own my own computer (mac OS X). I am on the road a lot (not in one fixed place). They use a cisco vpn and all my traffic has to go thru it.

Of course they only like IMAP and 8080 or 443. I have proxies set up in all my apps for when I’m on the VPN, but I have to hop off to do all kinds of things, so I am on and off all day, setting and unsetting http proxies.

Not even to mention it’s irritating that to be ‘private’ i have to disconnect. What’s the best solution: Ideally, I could just have an app that would tell mail and one browser to go over the VPN, and everything else can go out directlyI’m not sure if that is possible with a cisco VPN (I get the impression that VPNs take over all you network connection?), but that would be ideal!!

I’m not trying to get out of a firewall, rather I am trying to only connect thru the VPN for 2 apps, and concurrently do my internet and computing normally/open.sorry for the long post. Qwerty90: On most VPN connections it’s possible to tell it to NOT use the vpn connection as a default gateway. That way the vpn connection will only be used if you need something within the ip-range you’re connecting to. For all other things it just uses your normal connection. I could tell you where it is in Windows but I can’t help you with your Mac. One more thing. If you just want to chat or do other non-bandwidth-jerking things you could try httptunnel.

It’s a small application that works as a proxy but connects to their own servers. IF you pay you can have a fast connection but it’s possible to use a free but slow connection. I can use SSH through that to work on my FreeBSD machine at home and run msn and jabber through it. It is offcourse less secure since you have to rely on their servers, but you don’t have to install stuff at home for this. And the client can be installed as a normal user without admin rights and is easily removed afterwards. Check it out.