Safari allowing LEA blocked websites

[Pyroman]

http://www.edugeek.net/forums/ffs/21...-than-ffs.html

Okay i posted it in FFS but it's getting to be a bit tricky so need some help from you proper mac fans.

In short safari is allowing the kids access to bebo and myspace and probably others while blocking other websites so i know the filtering is working just not properly.

It's only affecting the macs with safari on them. If i use IE on the same machine it's filtered.

there's a link to the original thread

HELP!

[rob_f]

What is your LEA filtering product? How do you usually configure your browsers - proxy.pac, manual configuration, none: default gateway, etc.?

It would seem rather odd for a filtering device to behave differently based on user agent. Do you have a firewall? And if so, do the safari requests exhibit noticeably different behavior in the logs to that of IE?

Ta.

[Pyroman]

Smartfilter Bess Edition

everything comes pre-filtered from the LA we just point our browsers at proxy.*****.org

[plexer]

Can you make safari mimic ie as it's agent? this would rule out wether it is becuase of this.

Ben

[GrumbleDook]

Do you get the same errors with Firefox and Camino?

Make a note of one of the IPs of the machine affected and get a windows box that is not part of the domain (no GPOs or other config applied). Give it the same IP settings. Test it via the proxy first and then not via the proxy.

I may move this over to the Security forum depending on your answer as I might have to point out a few possible flaws in the core firewall of your RBC.

[Pyroman]

Do you get the same errors with Firefox and Camino?

Make a note of one of the IPs of the machine affected and get a windows box that is not part of the domain (no GPOs or other config applied). Give it the same IP settings. Test it via the proxy first and then not via the proxy.

I may move this over to the Security forum depending on your answer as I might have to point out a few possible flaws in the core firewall of your RBC.

I'll try testing with firefox now

[Pyroman]

just tested using firefox 2.0.0.16 on OSX 10.3.9
...

....


...

...
...

It's Fine!

just appears to be safari

[GrumbleDook]

Try it with Camino. Safari and Camino will make extensive use of your system settings for DNS and routing ... Firefox does not.

Also try it with a clean build of OS X, not added to any domain or OD. I don't think we established whether you are pushing settings via WGM or manually setting them up on a user template or on each machine.