236 reputation
135
bio website projectlocker.com
location Atlanta, GA
age
visits member for 5 years, 1 month
seen Sep 27 '13 at 15:02
I mostly program in Ruby, but have done a lot of Java, VB, C, and C++ over the years.

My company, ProjectLocker, provides free Subversion hosting, free Git hosting, and free Trac hosting.

Tweets as @runako.

Dec
3
awarded  Good Question
Feb
15
awarded  Yearling
Oct
26
awarded  Famous Question
May
31
awarded  Notable Question
Mar
20
awarded  Nice Question
Sep
28
awarded  Popular Question
Jun
15
comment Why Block Port 22 Outbound?
Also, do you worry that you force people to use off-network 3G cards to get their work done? In my experience, locked-down networks inevitably lead to lots of 3G cards and other hidden circumvention, because folks can't get their jobs done in the alloted time if they have to wait for IT to approve their usage, if anyone even knows who to call to get an exception. (One egregious case included a mailserver that wouldn't accept incoming attachments from the Internet. Yikes!) I'd be curious how you manage this balance.
Jun
15
comment Why Block Port 22 Outbound?
Thanks for the insight. It sounds like you wouldn't consider 3G a secret tunnel. Could you shed some light onto why it makes more sense to have people totally off-network when communicating to the Internet? It seems like you'd prefer rogue devices even less than an open 22 for outbound.
Jun
15
awarded  Supporter
Jun
15
comment Why Block Port 22 Outbound?
Thanks for the answer. How do you handle dedicated VPNs to sites outside your control (e.g. EC2, Web hosts, etc.)? Are these vendors typically willing to just do this custom setup for you, or do you usually have to make some large minimum commitment in terms of business to get them to do so?
Jun
15
comment Why Block Port 22 Outbound?
Thanks for a very insightful response. This is one of the few responses that address the technical risks (as opposed to the political risks) of open outbound ports.
Jun
15
comment Why Block Port 22 Outbound?
Doesn't that imply that they have to block HTTPS too?
Jun
15
comment Why Block Port 22 Outbound?
@duffbeer703 -- Could you please clarify on why outbound SSH is so bad? Is it just about ensuring that your users are denied certain abilities, or are there security risks? That's sort of the point of my question. :-)
Jun
14
awarded  Editor
Jun
14
comment Why Block Port 22 Outbound?
@KPWINC, added the clarification to the title. Thanks!
Jun
14
revised Why Block Port 22 Outbound?
Adding outbound to title (it was already in the question text)
Jun
14
awarded  Student
Jun
14
asked Why Block Port 22 Outbound?