Licson Lee says to 電訊台
If you can do traceroute then ICMP tunneling usually can work