I have been trying to detect/establish
DNS tunneling. First of all I logged out of my user account of the captive portal. Findings:
$ nslookup <somesite> // works fine
$ ping <somesite> // Destination Net Prohibited
Why the outputs of
ping are different. On the back they both are using ICMP protocol, I can't get that.
nslookup is working fine; so the
DNS queries are working fine. I tried doing
DNS tunneling by connecting to a
VPN Server running over port 25000 using
UDP. I was able to do
netcat to the port and I was able to connect to the VPN while I am logged in. But when I am logged out it does not connect. So, what does it indicate ?