http://www.lightproxy.com/

[Simcfc73]

Just been looking at the stuff that got blocked on the proxy and this came up. (as blocked)

A little s0d was browsing for proxies on the tinterent.

2006.6.7 10:20:58

192.168.100.136 Anonymous Brat
http://www.proxys4all.com/ GET 14688
*DENIED* : Weighted phrase limit of 50 : 190 ((erotic, porn)+(anonymous, proxy)+(anonymous, surfing)+(anonymou... 2006.6.7 10:21:46

192.168.100.136 Anonymous Brat
http://tm.uk.ask.com/r?t=an&s=a&uid=...8BA9F4E39FE3EC... GET 241
*EXCEPTION* : Exception site match.2006.6.7 10:21:55

192.168.100.136 Anonymous Brat
http://www.atomintersoft.com/product...xy/proxy-list/ GET 32000
*DENIED* : Weighted phrase limit of 50 : 275 (( anonymous , transparent , prox)+(anonymous, proxy)+(anonymous...2006.6.7 10:22:41

192.168.100.136 Anonymous Brat
http://tm.uk.ask.com/r?t=an&s=a&uid=...8BA9F4E39FE3EC... GET 216
*EXCEPTION* : Exception site match.2006.6.7 10:22:44

192.168.100.136 Anonymous Brat
http://www.proxy4free.com/page1.html GET 0
*DENIED* : Banned site: proxy4free.com2006.6.7 10:23:22

192.168.100.136 Anonymous Brat
http://tm.uk.ask.com/r?t=an&s=a&uid=...8BA9F4E39FE3EC... GET 206
*EXCEPTION* : Exception site match.2006.6.7 10:23:23

192.168.100.136 Anonymous Brat
http://www.multiproxy.org/ GET 0
*DENIED* : Banned site: multiproxy.org2006.6.7 10:23:33

192.168.100.136 Anonymous Brat
http://tm.uk.ask.com/r?t=an&s=a&uid=...8BA9F4E39FE3EC... GET 217
*EXCEPTION* : Exception site match.2006.6.7 10:24:23

192.168.100.136 Anonymous Brat
http://tm.uk.ask.com/r?t=an&s=a&uid=...8BA9F4E39FE3EC... GET 389
*EXCEPTION* : Exception site match. 2006.6.7 10:27:29

192.168.100.136 Anonymous Brat
http://tm.uk.ask.com/r?t=c&s=a&sv=0a...&o=312&id=3120... GET 283
*EXCEPTION* : Exception site match.2006.6.7 10:28:13

192.168.100.136 Anonymous Brat
http://tm.uk.ask.com/r?t=an&s=a&uid=...8BA9F4E39FE3EC... GET 208
*EXCEPTION* : Exception site match.2006.6.7 10:28:26

192.168.100.136 Anonymous Brat
http://www.publicproxys.com/ GET 67007
*DENIED* : Weighted phrase limit of 50 : 150 ((anonymous, proxy)+(anonymous, surfing)+(anonymous, internet)+ pr...

[TechMonkey]

That looks like he has found a website with a list of proxies and is clicking through the links. Audit his web use and look at the pages before!

[Joedetic]

You might want to be careful about showing his/her username and calling them a little s0d. Someone associated wtih him (eg parent, teacher, friend) might see this and get offended. Yes it's a remote possibility, but this particular pupil might try to cause some fuss over it?

[pete]

Use keyword filtering on the word "proxy" and its various mispellings. You may want to be careful how much weighting you give, since it's not an uncommon word in a non-IT sense.

[Simcfc73]

Smoothwall blocked all the stuff he was looking at.

It weighs 'anonymous, proxy' which invariabley shows up on these sites.

[Joedetic]

Annonymous Brat...

/me wonders whether that is some poor kid's name somewhere in the world...that'd be funny

[tom_newton]

One good way to kill proxy usage is to let ssl traffic through "whitelist only".
This restricts pupils to using only http proxies, which are esily identified by the content analyis.

As you point out, however, 99% of proxies are blocked either by the DCA or in the "proxies" category of the blocklists.