From: Asheesh Laroia Date: Mon, 12 Jan 2009 09:21:34 GMT Subject: Re: Help! My ISP blocks repo.or.cz. How to push changes? Message-ID: In-Reply-To: <200901120246.28364.jnareb@gmail.com> This is a little off-topic, but you CC:d the git list first. (-; On Mon, 12 Jan 2009, Jakub Narebski wrote: > The ISP I use (Telekomunikacja Polska S.A., aka TP) made some > unannounced changes for ADSL service (Neostrada) which made it block > repo.or.cz (and of course its aliases, including git.or.cz where git > wiki resides). It blocks also gimp.org and some Polish IRC servers > (irc.freenode.org on which #git resides works O.K.). People speculate > that this blocking was based on MAPS (Mail Abuse Prevention System, > which is SPAM backwards) lists to fight SPAM and/or to block botnets, > and uses null routing (IP based) blocking. I have no idea why repo.or.cz > is blocked: gimp.org is supposedly blocked because it hosts > irc.gimp.org on the same IP. By block I mean that even ping doesn't > work (no reply at all). That's horrifying. > I can access git wiki via one of many free HTTP proxies; currently I use > http://www.4proxy.de so there are only slight problems there. > > The problems is with fetching (via git:// protocol) of forks of git > repository on repo.or.cz, and pushing (via SSH) to a few of my git > repositories hosted on repo.or.cz. > > Do you have any suggestions to bypass this block for git? I have access > to Linux shell account (no root access, though) which doesn't have > problems with repo.or.cz, so I think I could set up SSH tunnel: but > how? And what to do with access via git:// - move to SSH too? $ ssh -D 1080 user@host In a a separate terminal: $ cat > /tmp/tsocks.conf # Here we have a config for tsocks that uses localhost:1080 as SOCKS5. server = 127.0.0.1 # Server type defaults to 4 so we need to specify it as 5 for this one server_type = 5 # The port defaults to 1080 but I've stated it here for clarity server_port = 1080 ^D $ export TSOCKS_CONF_FILE=/tmp/tsocks.conf $ tsocks lynx http://repo.or.cz/ You would need the 'tsocks' tool for your client system. Note that the remote system doesn't need any configuration this way. Just prefix any command-line operations that involve repo.or.cz with 'tsocks' and be sure to set TSOCKS_CONF_FILE. (On a Windows machine, use putty's graphical SSH client and FreeCap . Once you have the 'ssh -D' tunnel running, you can use it in Firefox as a SOCKS proxy: host = localhost, port = 1080. -- Asheesh. -- Don't relax! It's only your tension that's holding you together.