Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible if firewall blocking all http trafic but udp protocol is open connect to internet? because skype use udp protocol to connect and users can use skype. But is technicaly possible to cheat it and use proxy to connect to web via udp protocol?

share|improve this question

You're better off using an in-line content filtering device rather than a stateful firewall for content filtering.

share|improve this answer

Obviously you could use a proxying technique, for exampe OpenVPN, which works on udp protocol.

share|improve this answer
Well, except that OpenVPN isn't a proxy. – MDMarra Nov 6 '11 at 19:02

As @Olivier mentioned, you can perform UDP tunneling through the OpenVPN.

Take a look at this to route all client traffic through the OpenVPN. You can also do it with OpenSSH.

share|improve this answer
As I skimmed that article about OpenSSH, it seems to me that it is about tunneling UDP over TCP / SSH. – wzzrd Nov 9 '11 at 7:41

No, I don't think what you want to do is technically possible.

Firstly, and most importantly, webservers listen on TCP port 80, so unless you found some webservers which were listening for HTTP over UDP (which is itself a scary idea), then you'd be shit outta luck, even if you did get past the firewall.

Secondly, it sounds like you're trying to circumvent a firewall that's in place for a reason. What you're doing is potentially against the rules, or maybe a law, and generally regarded as bad practice.

Thirdly, even if you did want to break past the firewall, disregarding rules and measures put in place to stop you, then you'd still need a server on the outside to "translate" UDP traffic into TCP traffic. So yes, for that bit, you'd need some kind of proxy. Apparently OpenVPN can do it, but I think you should seriously consider the security and policy implications of what you're attempting.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.