Proxy Bypass websites

edsa · 30-04-2007, 03:05 PM

Hello all, we have a big problem at our high school with students getting access to banned sites through proxy bypass sites. We are handling the problem manually at the moment by entering the sites as we find them into ISA server or Terminator X. However, this is taking a lot of time to do manually.

Has anyone got the same problem? Or can anyone recomend a third party solution (hardware or software) to prevent this?

Many thanks

ed

tom_newton · 30-04-2007, 03:18 PM

ed,

I'm slightly biased, but our guardian solution is a great solution to this problem, and I honestly haven't seen another filter that handles proxies anywhere near as well. you can probably hack up something that has blocking capability from various sources (linux + squid + dg etc.) but this is "everything done for you"

Give me a call (number in my sig) if you want to know more.

Apologies for the mildly commercial nature of this post - but it's a damn fine answer to the question

j17sparky · 30-04-2007, 05:41 PM

Any un-secure proxy site will not get through with a Dans Guardian based solution, as DG is a content filter and reads the web page looking for "naughty" words, but its still clever enough to know "the naked chef" is not porn.

As above you can build one but depending on your *nix knowlegde you may have to run it in series with your current proxy (for logging purposes) but i couldnt tell you how that would affect performance. You would also need to build your list of word your self.

Theres the free ones which are really well built with great user interfaces, but again the word lists are upto you; Smoothwall community, Endian, IPCop

Or theres Smoothwall School Gardian which is yoru all in one, you pay annual subscription for the filter lists (both black/white and word content lists). TBF Smoothwall is the best (ive tryed loads and i mean loads!) and worth the money as it passes the book to them in regards to keeping the word lists upto date. And the web interface is really really good.

Ashers · 30-04-2007, 09:21 PM

We have a solution that we have to handle manually, but we're hoping for funding for a solution that will mean we don't have to do so much work.
The biggest problem is that there are just two of us looking for the sites and 1500 kids, we loose on sheer numbers.
Also there seems to be loads of new sites appearing every day!
Until we get our new solution we are sharing the sites we find with a couple of other schools and the county.
Could be an idea of we could all get together and combine lists, I'll pull ours together tomorow an post here.

Andrew_C · 30-04-2007, 09:36 PM

Try a search on this forum. We have had several threads with lists of proxies over the last year or so. Certainly will give you a good start, but as someone says "there's thousands out there, and new ones everyday; you need a holistic approach.

Friez · 01-05-2007, 07:45 AM

Our kids basically stopped using proxies once we made a sanction that would remove their Internet access for a few weeks if they were caught using them. Once they figured we were serious they either stopped completely or got impressively good at covering their tracks.

Ashers · 01-05-2007, 08:17 AM

Well I have the list, I was going to go through it and only post the proxy sites but I'm too lazy. Remember this is on top of the counties system. We cut a load down once we worked out how to add a wild card, no instructions or assistance from the guys who put the system in (or the techies who were here at the time), that's why were thinking of changing!

messengerfx
abun.com
darkthrone
freeyabb
playaholics
2flashgames
gamegarage
images.google
warriorsfortruth
regularguy
blogsofwar
ugotgames
mousebreaker
fetchfido
face-pic
shadowops
neopets
ha-ha.20m
vodafonelive
gator
chatonmsn
bubblegumclub
funkyfriends
thunderdownloads
freearcade
crazykids.20m
rudeboy.20m
20m.com
funwebproducts.com
fastclick.net
popcap.com
tengun.net
mofunzone.com
freeaddictinggames.com
funflashgames.com
dragongamez.com
teagames.com
2dplay.com
crazymonkeygames.com
gamepapa.com
fuckingcow.com
adult.pumag
myspace.com
mkarcade.com/proxy
mkarcade.com
mkarcade
offsurf
webmessenger.msn.com
ad.yieldmanager.com
mp3realm.org
adopt.euroclick.com
frontiernet.net
adopt.euroclick.com
ultimate-guitar.com
ultimate-guitar.com/forum
mp3realm.org
spacesounds.com
d.m3.net
m3.net
www.mp3000.net
vampirefreaks.com
bebo.com
yogames.net
everyoneshero.com
mp3realm.net
freewebarcade.com
mp3000.net
gospelmusictrivia.com
mp3.com
gamerzland.co.uk
gamegecko.com
dogpile.com
photobucket.com
pinkworld.com
bingbox.com
uk.zylom.com
game12.zylom.com
zylom.com
ninja.com
hotmail.msn.com
iloveim.com
meebo.com
thatseasy.com
elegancy.info
proxasaurus
proxy4u
proxy4you
proxyforu
proxyforyou
findproxy
webproxy4free
ahajokes
messengerfx
proxydust
evenindeath
youtube
proxyface
tcp-tunnel
freenav
411vm
muslimspace
genimo
proxwy
facebookproxy
yzoo
guglpages
aproxyz
titmuss
proxycollection
zwebproxy
demon.net
digitalpoint
publicserver
greatadmin.com
xroxee
video.google
spookysurf
proxyunblockerwebsite
proxymafia
proxyimpact
proxathon
webtalkproxy
blinklist
bibsonomy
born2die
1db
metacafe
proxy80
dragoncloak
by126w
by107w
mail.live
mac.com
facebookunblocker
besneaky
piczo
filterbypasss
groups.msn
pimpmyspace
tribalwars
mail.google
chatzy
ipaddresshide
mudholez
.*chat.*
myspacebrowse
profilepic
bebo2nd
sick-humor
myspace-online
vpass
filtercrusher
whatzzup
myspacesupertop
.*proxy.*
.*myspace.*
protectmy
otavo
Slyskip
Proxygin
Blahbleh
downloadatoz
justhide
anonymization
guardster
webwarper
w3privacy
anonymizer
the-cloak
pureprivacy
urlencoded
snoopblocker
unblockr
unipeak
urlencoded
websiteunblock
workstudyplay
shadowsurf
Famous5
PimpMyIP
privada
proxcover
UnBlockMySpace
ifilm
escapeblocks
go2.*
cantfilter
facebook
browse-orkut
freakingnews
dreamsurf

Southwell · 01-05-2007, 08:20 AM

That looks suspiciously like my list!

tom_newton · 01-05-2007, 08:42 AM

Re: content filtering in DG - thats only one aspect of what you can do with true content filtering. Rather than just spotting abuse thru proxy sites, it is better to actually spot the proxy site, which in 99.9% of cases, it is possible to do by examining the HTML structure.

alonebfg · 01-05-2007, 08:57 AM

cant you just block any search or site with the work proxy in it and if it has blocked a sit it shouldent do a override to allow

tom_newton · 01-05-2007, 09:35 AM

alone: yeh, you can also block "proxylike" search terms - always best to have >1 string to your bow.

Tom

shreevie · 01-05-2007, 10:00 AM

Yeah, we have a major problem with these sites and its always for accessing bebo, myspace etc. We currently have a list but there are stacks of sites popping up all the time and we just don't have the time to block them all. I also set up a rule to block any site with the word proxy in it for the students and still they find ways round it. The only way i've found to try and combat it is to look at the isa reports to see the top 10 websites for the day then add them to the list i have.

philjones2000 · 01-05-2007, 10:26 AM

If your filter system filters based on words in the urls, and the kids are just using it to go to bebo or myspace, I've found that a lot of the proxies are based on the same scripts and the url's they produce have the same code after the proxy domain so you can just filter this based on the sites you want to filter.

That probably made no sense so an example...

http://youbypass.com/?q=aHR0cDovL3d3...bQ%3D%3D&hl=e8

http://dodu.info/?q=aHR0cDovL3d3dy5i...bQ%3D%3D&hl=e8

both take you to bebo.com

So instead of filtering the domain, filter the "aHR0cDovL3d3dy5iZWJvLmNvbQ" part and you'll filter all the proxies that use this particular php.

No good if kids are accessing all sorts of sites, but we had a problem purely with bebo (they seem to have shunned myspace here). They didn't seem to understand they could go anywhere on the net through the proxies!

Geoff · 01-05-2007, 10:37 AM

It's just the URL base64 encoded. If your proxy understands this (Later versions of Dansguardian do) you can instruct it to reverse the base64 encoding then run its filters.

Halfmad · 01-05-2007, 10:22 PM

Quote:

Originally Posted by philjones2000

If your filter system filters based on words in the urls, and the kids are just using it to go to bebo or myspace, I've found that a lot of the proxies are based on the same scripts and the url's they produce have the same code after the proxy domain so you can just filter this based on the sites you want to filter.

That probably made no sense so an example...

http://youbypass.com/?q=aHR0cDovL3d3...bQ%3D%3D&hl=e8

http://dodu.info/?q=aHR0cDovL3d3dy5i...bQ%3D%3D&hl=e8

both take you to bebo.com

So instead of filtering the domain, filter the "aHR0cDovL3d3dy5iZWJvLmNvbQ" part and you'll filter all the proxies that use this particular php.

No good if kids are accessing all sorts of sites, but we had a problem purely with bebo (they seem to have shunned myspace here). They didn't seem to understand they could go anywhere on the net through the proxies!

Nice tip!

Welcome, Register for free! or Login below:
User Name		Remember Me?
Password

30-04-2007, 03:05 PM	#1
edsa Join Date: Apr 2007 Location: Northumberland Posts: 53 Thanks: 4 Thanked 0 Times in 0 Posts Rep Power: 0	Proxy Bypass websites Hello all, we have a big problem at our high school with students getting access to banned sites through proxy bypass sites. We are handling the problem manually at the moment by entering the sites as we find them into ISA server or Terminator X. However, this is taking a lot of time to do manually. Has anyone got the same problem? Or can anyone recomend a third party solution (hardware or software) to prevent this? Many thanks ed

30-04-2007, 03:18 PM	#2
tom_newton Join Date: Sep 2006 Location: Leeds Posts: 1,079 Thanks: 19 Thanked 58 Times in 50 Posts Rep Power: 17	Re: Proxy Bypass websites ed, I'm slightly biased, but our guardian solution is a great solution to this problem, and I honestly haven't seen another filter that handles proxies anywhere near as well. you can probably hack up something that has blocking capability from various sources (linux + squid + dg etc.) but this is "everything done for you" Give me a call (number in my sig) if you want to know more. Apologies for the mildly commercial nature of this post - but it's a damn fine answer to the question

30-04-2007, 05:41 PM	#3
j17sparky Join Date: Oct 2006 Location: Teesside, England Posts: 1,238 Thanks: 12 Thanked 32 Times in 26 Posts Rep Power: 13	Re: Proxy Bypass websites Any un-secure proxy site will not get through with a Dans Guardian based solution, as DG is a content filter and reads the web page looking for "naughty" words, but its still clever enough to know "the naked chef" is not porn. As above you can build one but depending on your *nix knowlegde you may have to run it in series with your current proxy (for logging purposes) but i couldnt tell you how that would affect performance. You would also need to build your list of word your self. Theres the free ones which are really well built with great user interfaces, but again the word lists are upto you; Smoothwall community, Endian, IPCop Or theres Smoothwall School Gardian which is yoru all in one, you pay annual subscription for the filter lists (both black/white and word content lists). TBF Smoothwall is the best (ive tryed loads and i mean loads!) and worth the money as it passes the book to them in regards to keeping the word lists upto date. And the web interface is really really good.

30-04-2007, 09:21 PM	#4
Ashers Join Date: Apr 2007 Location: Basingstoke, Hampshire Posts: 29 Thanks: 0 Thanked 0 Times in 0 Posts Rep Power: 0	Re: Proxy Bypass websites We have a solution that we have to handle manually, but we're hoping for funding for a solution that will mean we don't have to do so much work. The biggest problem is that there are just two of us looking for the sites and 1500 kids, we loose on sheer numbers. Also there seems to be loads of new sites appearing every day! Until we get our new solution we are sharing the sites we find with a couple of other schools and the county. Could be an idea of we could all get together and combine lists, I'll pull ours together tomorow an post here.

		EduGeek.net Forums > General > General Chat
Proxy Bypass websites

30-04-2007, 09:36 PM	#5
Andrew_C Join Date: Sep 2005 Location: Winchester Posts: 913 Thanks: 5 Thanked 25 Times in 22 Posts Rep Power: 13	Re: Proxy Bypass websites Try a search on this forum. We have had several threads with lists of proxies over the last year or so. Certainly will give you a good start, but as someone says "there's thousands out there, and new ones everyday; you need a holistic approach.

01-05-2007, 07:45 AM	#6
Friez Join Date: Dec 2006 Posts: 782 Thanks: 13 Thanked 13 Times in 12 Posts Rep Power: 11	Re: Proxy Bypass websites Our kids basically stopped using proxies once we made a sanction that would remove their Internet access for a few weeks if they were caught using them. Once they figured we were serious they either stopped completely or got impressively good at covering their tracks.

01-05-2007, 08:17 AM	#7
Ashers Join Date: Apr 2007 Location: Basingstoke, Hampshire Posts: 29 Thanks: 0 Thanked 0 Times in 0 Posts Rep Power: 0	Re: Proxy Bypass websites Well I have the list, I was going to go through it and only post the proxy sites but I'm too lazy. Remember this is on top of the counties system. We cut a load down once we worked out how to add a wild card, no instructions or assistance from the guys who put the system in (or the techies who were here at the time), that's why were thinking of changing! messengerfx abun.com darkthrone freeyabb playaholics 2flashgames gamegarage images.google warriorsfortruth regularguy blogsofwar ugotgames mousebreaker fetchfido face-pic shadowops neopets ha-ha.20m vodafonelive gator chatonmsn bubblegumclub funkyfriends thunderdownloads freearcade crazykids.20m rudeboy.20m 20m.com funwebproducts.com fastclick.net popcap.com tengun.net mofunzone.com freeaddictinggames.com funflashgames.com dragongamez.com teagames.com 2dplay.com crazymonkeygames.com gamepapa.com fuckingcow.com adult.pumag myspace.com mkarcade.com/proxy mkarcade.com mkarcade offsurf webmessenger.msn.com ad.yieldmanager.com mp3realm.org adopt.euroclick.com frontiernet.net adopt.euroclick.com ultimate-guitar.com ultimate-guitar.com/forum mp3realm.org spacesounds.com d.m3.net m3.net www.mp3000.net vampirefreaks.com bebo.com yogames.net everyoneshero.com mp3realm.net freewebarcade.com mp3000.net gospelmusictrivia.com mp3.com gamerzland.co.uk gamegecko.com dogpile.com photobucket.com pinkworld.com bingbox.com uk.zylom.com game12.zylom.com zylom.com ninja.com hotmail.msn.com iloveim.com meebo.com thatseasy.com elegancy.info proxasaurus proxy4u proxy4you proxyforu proxyforyou findproxy webproxy4free ahajokes messengerfx proxydust evenindeath youtube proxyface tcp-tunnel freenav 411vm muslimspace genimo proxwy facebookproxy yzoo guglpages aproxyz titmuss proxycollection zwebproxy demon.net digitalpoint publicserver greatadmin.com xroxee video.google spookysurf proxyunblockerwebsite proxymafia proxyimpact proxathon webtalkproxy blinklist bibsonomy born2die 1db metacafe proxy80 dragoncloak by126w by107w mail.live mac.com facebookunblocker besneaky piczo filterbypasss groups.msn pimpmyspace tribalwars mail.google chatzy ipaddresshide mudholez .chat. myspacebrowse profilepic bebo2nd sick-humor myspace-online vpass filtercrusher whatzzup myspacesupertop .proxy. .myspace. protectmy otavo Slyskip Proxygin Blahbleh downloadatoz justhide anonymization guardster webwarper w3privacy anonymizer the-cloak pureprivacy urlencoded snoopblocker unblockr unipeak urlencoded websiteunblock workstudyplay shadowsurf Famous5 PimpMyIP privada proxcover UnBlockMySpace ifilm escapeblocks go2.* cantfilter facebook browse-orkut freakingnews dreamsurf

01-05-2007, 08:20 AM	#8
Southwell Join Date: Apr 2007 Location: Basingstoke Posts: 77 Thanks: 5 Thanked 0 Times in 0 Posts Rep Power: 0	Re: Proxy Bypass websites That looks suspiciously like my list!

01-05-2007, 08:42 AM	#9
tom_newton Join Date: Sep 2006 Location: Leeds Posts: 1,079 Thanks: 19 Thanked 58 Times in 50 Posts Rep Power: 17	Re: Proxy Bypass websites Re: content filtering in DG - thats only one aspect of what you can do with true content filtering. Rather than just spotting abuse thru proxy sites, it is better to actually spot the proxy site, which in 99.9% of cases, it is possible to do by examining the HTML structure.

01-05-2007, 08:57 AM	#10
alonebfg Join Date: Aug 2006 Location: south west some of the time Posts: 786 Thanks: 9 Thanked 28 Times in 15 Posts Blog Entries: 4 Rep Power: 10	Re: Proxy Bypass websites cant you just block any search or site with the work proxy in it and if it has blocked a sit it shouldent do a override to allow

01-05-2007, 09:35 AM	#11
tom_newton Join Date: Sep 2006 Location: Leeds Posts: 1,079 Thanks: 19 Thanked 58 Times in 50 Posts Rep Power: 17	Re: Proxy Bypass websites alone: yeh, you can also block "proxylike" search terms - always best to have >1 string to your bow. Tom

01-05-2007, 10:00 AM	#12
shreevie Join Date: Dec 2006 Location: Server Room Posts: 6 Thanks: 0 Thanked 0 Times in 0 Posts Rep Power: 0	Re: Proxy Bypass websites Yeah, we have a major problem with these sites and its always for accessing bebo, myspace etc. We currently have a list but there are stacks of sites popping up all the time and we just don't have the time to block them all. I also set up a rule to block any site with the word proxy in it for the students and still they find ways round it. The only way i've found to try and combat it is to look at the isa reports to see the top 10 websites for the day then add them to the list i have.

01-05-2007, 10:26 AM	#13
philjones2000 Join Date: Mar 2006 Location: Pool, Cornwall Posts: 83 Thanks: 4 Thanked 5 Times in 1 Post Rep Power: 6	Re: Proxy Bypass websites If your filter system filters based on words in the urls, and the kids are just using it to go to bebo or myspace, I've found that a lot of the proxies are based on the same scripts and the url's they produce have the same code after the proxy domain so you can just filter this based on the sites you want to filter. That probably made no sense so an example... http://youbypass.com/?q=aHR0cDovL3d3...bQ%3D%3D&hl=e8 http://dodu.info/?q=aHR0cDovL3d3dy5i...bQ%3D%3D&hl=e8 both take you to bebo.com So instead of filtering the domain, filter the "aHR0cDovL3d3dy5iZWJvLmNvbQ" part and you'll filter all the proxies that use this particular php. No good if kids are accessing all sorts of sites, but we had a problem purely with bebo (they seem to have shunned myspace here). They didn't seem to understand they could go anywhere on the net through the proxies!

Register now for FREE and post messages!
Username: Password: Confirm Password: E-Mail: Confirm E-Mail: Birthday: Image Verification I agree to forum rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
proxy bypass sites	bishopsgarthstockton	Links	77	07-12-2006 12:29 PM
Proxy Bypass Websites	ticker	Windows	13	24-05-2006 09:28 AM

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search Thread
Show Printable Version Email this Page	Search Thread: Advanced Search

01-05-2007, 10:37 AM	#14
Geoff Join Date: Jun 2005 Location: Fylde, Lancs, UK. Posts: 9,932 Thanks: 42 Thanked 230 Times in 209 Posts Blog Entries: 1 Rep Power: 67	Re: Proxy Bypass websites It's just the URL base64 encoded. If your proxy understands this (Later versions of Dansguardian do) you can instruct it to reverse the base64 encoding then run its filters.

General Chat forum sponsored by