Routing Packets Is Not A Crime

[unixman_again]

I don't know if this is going to affect us. Will students be able to use this to by-pass our filters? Probably not but we should keep our eyes open https://routingpacketsisnotacrime.uk/

[Arthur]

Unless students go to the effort of setting up their own proxy server, blocking routingpacketsisnotacrime.uk should be sufficient.

 

function FindProxyForURL(url, host) 
{    
var list = new Array("facebook.com","twitter.com");

   for(var i=0; i < list.length; i++)
   {
       if (shExpMatch(host, list[i]))
       {
          return "PROXY proxy-1-2.[color="#FF0000"]routingpacketsisnotacrime.uk[/color]:8080";
       }
   }
   return "DIRECT";
}

Edited September 27, 2014 by Arthur
Typo

[RoutingPacketsIsNotACrime]

Unfortunately there are tens of alternate domains (e.g. thisproxykillscensors.uk with a new one launching every week (£4 for a .uk + an API == war of attrition) ) and ~15 servers running the squid backend rotated each month (got to love cloud automation) and the PAC file takes randomisation arguments.

 

Apologies for making your lives more difficult but state coerced national censorship is dangerous and needs to die.

 

edit: In a few weeks the BGP filtering will go live and will restrict the proxies to subnets announced by BT, Virgin, TalkTak, Sky and the mobile providers. If your IP blocks aren't announced by those ASNs the proxies won't allow connections

Edited September 30, 2014 by RoutingPacketsIsNotACrime
Mention of BGP

[SPFLDHSTech]

That will cut off a lot of BT Wholesale ISPs from your service. Thankfully, that includes a lot of LEAs

[caffrey]

GPO to block changing internet\proxy settings too (should be blocked regardless)

[synaesthesia]

Can't see this being an issue - as @caffrey states, no reason why anyone should be able to change their proxy settings.

[sonofsanta]

Might be an issue for boarding schools where students have their own devices, I suppose, but ain't no-one messing with PAC files round here.