+ Post New Thread
Results 1 to 14 of 14
Windows Thread, Proxy Bypass Websites in Technical; I don’t know if any one else is having this problem, but having banned a lot of websites at both ...
  1. #1
    ticker's Avatar
    Join Date
    Mar 2006
    Location
    Waterfoot, Rossendale
    Posts
    301
    Thank Post
    56
    Thanked 20 Times in 17 Posts
    Rep Power
    21

    Proxy Bypass Websites

    I don’t know if any one else is having this problem, but having banned a lot of websites at both a local and county level. The students are using proxy bypass websites to get around ours and county’s proxy servers as well as the firewalls.
    Has any one been able to stop them doing this with out having to block ever single websites that does this? We are using Windows Server 2003, with ISA 2004.[align=justify]

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Proxy Bypass Websites

    You need a filter that blocks via keywords rather than simple blacklists. I'd done that sucessfully with Dansguardian and Squid running on a Linux box. I'm sure others can suggest a windows approach though.

  3. #3

    Join Date
    May 2006
    Location
    Milton Keynes
    Posts
    54
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Proxy Bypass Websites

    MKKidguard blocks all CGI-proxies for us here, you could contact the nice guys at the Open University - MK Schools.net project to find out how its done. (kidguard is their development and free to all who are provided broadband by them).

    Before Kidguard we used to block CGI-proxies individually at our ISA server, crude but it worked nonetheless.

  4. #4

    Join Date
    Oct 2005
    Location
    Anywhere but in a school ;o)
    Posts
    522
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Proxy Bypass Websites

    Hello hello... another MK-er. Hi Jason!

    MK Schools have only started blocking those proxies recently, after we complained to them that they weren't being blocked!!

    ticker - we use ISA 2004, and we haven't found the best way around this yet either - like Jason above, we blocked each site individually (why oh why can't ISA block with *? At least then we could block *proxy*).

    Unless your internet provider can block by keyword, the only way around it (as it is for us) is to put in some sort of keyword filtering mechanism, a la Dansguardian...

  5. #5

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,678
    Thank Post
    861
    Thanked 650 Times in 431 Posts
    Rep Power
    499

    Re: Proxy Bypass Websites

    Our LEA has denied access to sites via IP - bit of a bugger at times but does help

    We are getting ready to switch to denied to all except a whitelist of sites that we specify.

  6. #6

    TechMonkey's Avatar
    Join Date
    Dec 2005
    Location
    South East
    Posts
    3,295
    Thank Post
    226
    Thanked 406 Times in 303 Posts
    Rep Power
    162

    Re: Proxy Bypass Websites

    We block *proxy* which catches most but we also found a string that was in a lot of the URL's to proxies, something like 10110A. Filtered this and has caught a whole more. I'll dig through our lists and see if I can find it.

  7. #7

    Join Date
    Jan 2006
    Posts
    40
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    18

    Re: Proxy Bypass Websites

    Our LEA uses RM Safetynet and this blocks alot and then we purchased surfcontrol to allow us to filter even more and surfcontrol includes a filter for proxies this seems to stop them !

  8. #8
    ticker's Avatar
    Join Date
    Mar 2006
    Location
    Waterfoot, Rossendale
    Posts
    301
    Thank Post
    56
    Thanked 20 Times in 17 Posts
    Rep Power
    21

    Re: Proxy Bypass Websites

    Cheers guy's, will have a bash at it, have already been looking at buying surfcontrol to give us more control and filtering locally rather than using the county councils.

  9. #9

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Proxy Bypass Websites

    Quote Originally Posted by TechMonkey
    We block *proxy* which catches most but we also found a string that was in a lot of the URL's to proxies, something like 10110A. Filtered this and has caught a whole more. I'll dig through our lists and see if I can find it.
    Come on techmonkey don'y keep us in suspense.

    Does your method work for translator sites like Babel Fish which is another vector the kids use.

  10. #10

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Proxy Bypass Websites

    Quote Originally Posted by NetworkGeezer
    Come on techmonkey don'y keep us in suspense.
    (Typo or bad attempt at a Scottish accent. You decide)

  11. #11

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,678
    Thank Post
    861
    Thanked 650 Times in 431 Posts
    Rep Power
    499

    Re: Proxy Bypass Websites

    Quote Originally Posted by NetworkGeezer
    Quote Originally Posted by NetworkGeezer
    Come on techmonkey don'y keep us in suspense.
    (Typo or bad attempt at a Scottish accent. You decide)
    Both we spell it Dinnae :P

  12. #12

    TechMonkey's Avatar
    Join Date
    Dec 2005
    Location
    South East
    Posts
    3,295
    Thank Post
    226
    Thanked 406 Times in 303 Posts
    Rep Power
    162

    Re: Proxy Bypass Websites

    Sorry, forgot about this. URL part is 010110A. Do a google search on it and you will find a hundred and one different prokies or links to proxies. It is from a CGI-Proxy so will only stop that one, but it seems to be a very prevelant one. Doesn't do the translator sites though I'm afraid, though we have filtered most of these as well.
    We have also filtered */http/* to stop a lot of proxies this way. It does catch a few legitimate redirection scripts though so this may be one you don't want to do.

  13. #13

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Proxy Bypass Websites

    It's simpler to just whitelist the odd site that is blocked accidently by that rule.

  14. #14

    TechMonkey's Avatar
    Join Date
    Dec 2005
    Location
    South East
    Posts
    3,295
    Thank Post
    226
    Thanked 406 Times in 303 Posts
    Rep Power
    162

    Re: Proxy Bypass Websites

    Yep, that's what we currently do. It's just annoying when it pops up on a site that you don't usually use, or keep forgetting to add it (ala The Register RSS feed!) Can also confuse teachers when they have a a nice site that suddenly throws up a filter just because they tried going to a different section or to an external link that looked safe. BUt is fun going into tell them that they're filter was logged, just to see their faces

SHARE:
+ Post New Thread

Similar Threads

  1. proxy bypass sites
    By bishopsgarthstockton in forum Links
    Replies: 77
    Last Post: 7th December 2006, 11:29 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •