No way to turn the firewalls of (or modify their configs)
No way to turn the firewalls of (or modify their configs) |
|
| log in |
Questions and Answers : Preferences : No way to turn the firewalls of (or modify their configs)
| Author | Message |
|---|---|
|
Hi all, a general question: if I can't turn a series of company firewalls off, but I'd like to get Seti@Home and BOINC on my office computer as a background activity that does not impact at all on the resources usage, being the computer just destined to me, could I maybe have the chance (in any way) to either manually download the workunits and upload them ? I feel that there is no way to change the company firewall restrictions... Many thanks, | |
ID: 946341 ·  | |
|
http://setiathome.berkeley.edu/info.php Run SETI@home only on authorized computers ____________ Jord - BOINC FAQ Service - BOINC User Wiki Real is just a matter of perception. | |
| ID: 946342 · | |
|
Yes, but would there be a method that allows a user to download manually a workunit so that he can give it to the software to process it ? I imagine there's not. Many thnaks, | |
| ID: 946343 · | |
|
I am not going to help you get fired. | |
| ID: 946349 · | |
|
Hi | |
| ID: 954695 · | |
|
If it's your own laptop, why not download the workunits while at home before you go into work? That way you won't have to worry about company firewalls or server mirrors. | |
| ID: 954697 · | |
|
I keep it on work almost full of time, all the cards and wires should stay on it becouse it is on testing use... No sense pick it often to my home.. | |
| ID: 954701 · | |
So if there would be any way to connect servers without main/official internet addresses so it will be best solution to my problem. I ve heard that there should be some backports available to normal users too, is this rumour true or not? There are no other ports or "backports" available to use. Even if there were, you'd still have to open those ports through your firewall, so you'd be back at square one. I remember times when original SetiATHome apllication allowed this kind of connections straight to other than main servers. Those weren't "backports" but instead an open port to an alternate download server. Still, any communication to the servers require opening a TCP or UDP port in your firewall. In theory, stateful firewalls sense when a packet is outgoing or incoming and will usually allow all outgoing communications. Since the BOINC client is the software that initiates communications from inside your network, and this is classified as outgoing communications, the comms are allowed to continue (even when the server returns comms from the outside). But if the comms are initiated from the outside (therefore an incoming comm), such as if the BOINC servers were to initiate comms (and they do not), then this behavior is blocked by the majority of firewalls. Most businesses have industrial grade firewalls that block all traffic except that which the IT Admins specifically allow, which is why getting permission and help are so important. They know their network and they know their firewall. Most of the time, they will say "yes" to a request of running software but refuse to help knowing full well that the user will give up trying and forget the idea altogether (I know this as an IT Admin). In the end, this usually allows the Admin to save face without having to look like a Network Nazi, but still enforces a secure network while the ultimate answer is in fact a resounding 'no'. But nowaday when we live on BOINC-age, there is only one connection to all users. That suxs :( There is only a single TCP port used, which is all that should be necessary for any program. In the background, round robin DNS or server load balancing should take care of all internet requests without the user having to "specially" configure their machine, which isn't very user-friendly of a way to do things. This also allows the project to focus on doing scientific work without having to manage communications set up on multiple servers. In that respect, BOINC has been a virtual God-send for the project Administrators. ____________ | |
| ID: 954747 · | |
|
ok | |
| ID: 954937 · | |
Many tricks are still available ;) ...but that's the point: you shouldn't have to use tricks. If you have to use tricks to use your company's network, then you simply shouldn't do it. Doing so can get you fired, even if you have permission from you boss. A recent school IT Administrator had previous permission from his boss to install SETI on 5,000 computers; a new boss came in and said he didn't have permission and now there might be a lawsuit against him, claiming up to $1.6 million USD in damages. It's simply not worth it to run SETI on such machines. ____________ | |
| ID: 954971 · | |
Questions and Answers : Preferences : No way to turn the firewalls of (or modify their configs)
| Copyright © 2013 University of California |
