My network has been over-ruled any help ?

[WARMECHINE9240]

Hello I’m hoping that someone on this forum could help my issue , it may sound a bit far-fetched but basically the network owner is installing a server and a sniffer and my main consern is my traffic and privacy being invaded and how I can stop this from happeneing by maybe using a vpn or any solutions like that ? He also mentioned he will install software to boot me off the network if he suspects anything . Thanks . I also have my own extended that I use as a private network to transfer data between my nas and my pc I’m also worried this may also be accessible by the main router ?

[ProjectBox153]

Who owns and controls this network? Is it a school? Home? If so, we can't help you here to get around restrictions. 

[samcool55]

"software to boot you of the network" does he mean booting your pc of the network like PXE boot or kicking you off the network?

 

It's a really weird situation you have going on tbh... Also wtf is he planning to do with the server? Apart from DNS and DHCP functionality there's not much he can do with it if you don't want to talk to the server. And both DNS and DHCP isn't even required either, you can configure a static IP instead of DHCP and run your own DNS server, or use a third party one.

[redbullvodka]

Thing with VPNs are that they make you anonymous to the rest of the interwebz, sure. But not to your own network admin. Your traffic ALWAYS passes through your router or whatever you have. Thereby making it so the network admin can always check your traffic.

I´m really intrigued now though, what is this situation even? Sounds like you´re a prisoner lol

[WARMECHINE9240]

42 minutes ago, redbullvodka said:

Thing with VPNs are that they make you anonymous to the rest of the interwebz, sure. But not to your own network admin. Your traffic ALWAYS passes through your router or whatever you have. Thereby making it so the network admin can always check your traffic.

I´m really intrigued now though, what is this situation even? Sounds like you´re a prisoner lol

Feels like I’m a prisoner too lol , it’s the house owner and he wants to have control over everything I just want to make sure he can’t see everything I’m doing like bank details and login information I just want to have normal functionality like an everyday user with privacy but I need to know if the vpn will stop them seeing a overview of the Info like login details and card details that’s being sent back and forward . I run on my own network as well that gets internet feed from the main network so I communicate privately on my network between my pc and nas .

[WARMECHINE9240]

50 minutes ago, samcool55 said:

"software to boot you of the network" does he mean booting your pc of the network like PXE boot or kicking you off the network?

 

It's a really weird situation you have going on tbh... Also wtf is he planning to do with the server? Apart from DNS and DHCP functionality there's not much he can do with it if you don't want to talk to the server. And both DNS and DHCP isn't even required either, you can configure a static IP instead of DHCP and run your own DNS server, or use a third party one.

He wants the server to backup his Mac and just have network storage , he offered me space but I’m thinking no because he can block it anytime and I don’t want him being able to see my files so I’d have to encrypt them , it’s just easier to use my nas. He is a proper into tech guy who knows way too much about tech and hacks the lot and I’m just afraid he will hack me cause I’ve saw him do it before it isn’t mind blowing he is so intense I want to know how he dose it all I just need the resources and guides and I will be there ?

[WARMECHINE9240]

1 hour ago, Jamiec1130 said:

Who owns and controls this network? Is it a school? Home? If so, we can't help you here to get around restrictions. 

It’s a home network but he is a network geek like someone you would find at the CIA or fbi patrolling private networks and inspecting traffic, he is too good I just need to encrypt my traffic so he can’t see anything I’m doing but I need some advice and some tips ?

[The Benjamins]

49 minutes ago, redbullvodka said:

Thing with VPNs are that they make you anonymous to the rest of the interwebz, sure. But not to your own network admin. Your traffic ALWAYS passes through your router or whatever you have. Thereby making it so the network admin can always check your traffic.

I´m really intrigued now though, what is this situation even? Sounds like you´re a prisoner lol

that is not true, a VPN encrypts the whole internet stream, the router will only see that data is passing but will be unable to discern what that data is.

 

A VPN will solve all your issues, I use PIA they are fast, easy, and cheap.

[mynameisjuan]

5 hours ago, WARMECHINE9240 said:

Feels like I’m a prisoner too lol , it’s the house owner and he wants to have control over everything I just want to make sure he can’t see everything I’m doing like bank details and login information I just want to have normal functionality like an everyday user with privacy but I need to know if the vpn will stop them seeing a overview of the Info like login details and card details that’s being sent back and forward . I run on my own network as well that gets internet feed from the main network so I communicate privately on my network between my pc and nas .

VPN encrypts the traffic. I mean packet sniffing, you can easily tell when the traffic is using VPN, but the packets are still unreadable. VPN is going to be safe. 

[Guest]

Most DPI (deep packet inspection) is quite useless.

 

At most, you'll see the destination server addresses: e.g. Facebook, Steam or any other website. If you use a 3rd party VPN service, you'll simply see a heap of encrypted traffic all destined to that VPN service and nothing else. Keep in mind though that doing this will likely slow your connection speed as you''re going from A to B via a 3rd party VPN.

 

If you don't use a VPN, the traffic is still (usually) encrypted via SSL (the little green padlock on your web browser). It's just that he may be able to see the websites you're visiting, just not what you're doing there.

 

It's really common for businesses to block outbound VPN traffic and force all outbound traffic through a proxy/web filter to block content (e.g. social media, adult content, P2P or games). There's a cutdown version of this on home routers called parental control - essentially block access to X, Y and Z websites,

[dan24]

More on Windspeed's points - don't let him install anything on your computer.  This applies especially to certificates.  If he installed a cert on your computer, he can potentially see all your encrypted SSL traffic by being a "Man in the Middle."

 

Here's a tutorial on how it's done.  It's a little dated, but the principles are the same.  There are legitimate reasons for this, but it sounds like this guy is just being a pain in the ass. 

 

https://turbofuture.com/internet/Intercepting-HTTPS-Traffic-Using-the-Squid-Proxy-in-pfSense

 

I'd get permission to install your own internet service.  If he's trying to intercept all your internet traffic, I'd be looking for another option.

[dalekphalm]

1 hour ago, dan24 said:

More on Windspeed's points - don't let him install anything on your computer.  This applies especially to certificates.  If he installed a cert on your computer, he can potentially see all your encrypted SSL traffic by being a "Man in the Middle."

 

Here's a tutorial on how it's done.  It's a little dated, but the principles are the same.  There are legitimate reasons for this, but it sounds like this guy is just being a pain in the ass. 

 

https://turbofuture.com/internet/Intercepting-HTTPS-Traffic-Using-the-Squid-Proxy-in-pfSense

 

I'd get permission to install your own internet service.  If he's trying to intercept all your internet traffic, I'd be looking for another option.

Yeah that'd be an immediate deal breaker for me if my Landlord demanded that kind of control.

 

I'd demand permission to get my own ISP connection installed, and if he doesn't give permission, I'd start looking for a new place to live.