Boredguy Posted June 23, 2015 Posted June 23, 2015 @Oaktech it wasn't a case of getting errors, just that it was still reporting the normal certificate. At least my phone is now shouting that my access to google has been intercepted and I might not be safe
trivers1982 Posted June 23, 2015 Posted June 23, 2015 Currently pulling my hair out about this. They want us to install a cert to every device that connects to the internet, both through the LAN and the transparent proxy service. We are filtered using lightspeed on the LAN and this is an easy GPO rollout and an auto config for the Domain PCs/Macs. The staff iPads and laptops are going to be a pain as we have to re-write the instructions for them to connect, then they have to actually do it! I can see us having a queue at the door! The transparent proxy is a different beast all together. First we have to roll out an auto-proxy (potentially meaning they have to type the Proxy URL in themselves), they then have to authenticate themselves to Lightspeed finally they will have to install 2 Certs before Google and Youtube will work! To top it all off self signed certs installed on iOS are not trusted by Chrome, which basically means that browser cant be used on iOS devices in school. WooHoo!
localzuk Posted June 23, 2015 Posted June 23, 2015 This isn't SWGfL's fault, this is down to us wanting to be able to filter this stuff beyond Google's built in safe search.
Oaktech Posted June 23, 2015 Posted June 23, 2015 @Oaktech it wasn't a case of getting errors, just that it was still reporting the normal certificate. At least my phone is now shouting that my access to google has been intercepted and I might not be safe Yeah, I know. I saw a disparity between staff proxy and student proxy for about 20 minutes and then everything went over. None of the users have even noticed!
Steve21 Posted June 23, 2015 Author Posted June 23, 2015 Google images broken for anyone else? Doesn't seem to pop-up anymore when you click on them, just stays still unless you open them while clicking ctrl-image Works fine on staffproxy (original one) but not on sslfilter Steve
localzuk Posted June 23, 2015 Posted June 23, 2015 Google images broken for anyone else? Doesn't seem to pop-up anymore when you click on them, just stays still unless you open them while clicking ctrl-image Works fine on staffproxy (original one) but not on sslfilter Steve Working fine for me.
FragglePete Posted June 23, 2015 Posted June 23, 2015 Google images broken for anyone else? Doesn't seem to pop-up anymore when you click on them, just stays still unless you open them while clicking ctrl-image Works fine on staffproxy (original one) but not on sslfilter Steve I noticed this behavior with Chrome on sslfilter, but works fine on IE. Pete 1
free780 Posted June 23, 2015 Posted June 23, 2015 Putting a cert on every BYOD device isn't really practical. If a domain cant be trusted block it. My old job had Google redirected to yahoo. You don't have to install a cert at starbucks.
localzuk Posted June 23, 2015 Posted June 23, 2015 Putting a cert on every BYOD device isn't really practical. If a domain cant be trusted block it. My old job had Google redirected to yahoo. You don't have to install a cert at starbucks. Our job is to enable learning. Blocking Google is the opposite of that. Not to mention, Starbucks doesn't have an obligation to protect children. 1
Steve21 Posted June 24, 2015 Author Posted June 24, 2015 We have now completed our schedule of changes to begin SSL interception and testing suggests this is working successfully. If you have any questions or want to confirm SSL interception is working at your site please feel free to call the Service Desk. @JGoswell Is there any way to block users from accessing the old proxies? Just wondering what stops any students with BYOD putting their devices onto the old proxies so disabling SSL interception? Thanks, Steve
X-13 Posted June 24, 2015 Posted June 24, 2015 Google images broken for anyone else? Doesn't seem to pop-up anymore when you click on them, just stays still unless you open them while clicking ctrl-image Works fine on staffproxy (original one) but not on sslfilter Steve I've just noticed this... google results are coming up with the RM cert but Youtube isn't, as well. We're just using sslfilter, I didn't even know there was a staff proxy version... Haven't tested if it's ACTUALLY blocking stuff, not really sure where to start with that other than searching for the "finest Internet entertainment". [if you know what I mean. ]
localzuk Posted June 24, 2015 Posted June 24, 2015 (edited) @Steve21 Could that be done by using DNS spoofing? Add a CNAME record for the old servers to point at the new server name? @X-13 Youtube still appears to be http rather than https for us, using Youtube for Schools. Edited June 24, 2015 by localzuk
X-13 Posted June 24, 2015 Posted June 24, 2015 @X-13 Youtube still appears to be http rather than https for us, using Youtube for Schools. It's forced [by Google] https here... We use original recipe YouTube [because nobody listens to what I say]
Steve21 Posted June 24, 2015 Author Posted June 24, 2015 @Steve21 Could that be done by using DNS spoofing? Add a CNAME record for the old servers to point at the new server name? Honestly haven't tried but I assumed that would make a loop? As proxy.swgfl.org.uk would point to sslfilter.proxy.swgfl.org.uk which would resolve to sslfilter & sslfilter.proxy.swgfl.org.uk ? Or doesn't it check it twice? Steve
localzuk Posted June 24, 2015 Posted June 24, 2015 Honestly haven't tried but I assumed that would make a loop? As proxy.swgfl.org.uk would point to sslfilter.proxy.swgfl.org.uk which would resolve to sslfilter & sslfilter.proxy.swgfl.org.uk ? Or doesn't it check it twice? Steve That's a good point. In which case, could you just put in an A record of 127.0.0.2 or something, so it'd fail instead?
vizubeat Posted June 25, 2015 Posted June 25, 2015 I've just noticed this... google results are coming up with the RM cert but Youtube isn't, as well. We're just using sslfilter, I didn't even know there was a staff proxy version... Haven't tested if it's ACTUALLY blocking stuff, not really sure where to start with that other than searching for the "finest Internet entertainment". [if you know what I mean. ] @X-13 and @Steve21 are you still having problems with Google Images being borked? It definitely doesn't work here in IE or Chrome when using sslfilter.proxy.swgfl.org.uk - are you guys still having problems? Google Images works fine if using unfiltered connection. I'm about to log a call but it'd be handy to know if you or anyone else is still struggling.
Oaktech Posted June 25, 2015 Posted June 25, 2015 I have lots of weirdness on the sslfilter.staffproxy.swgfl.org.uk * Search results won't open in IE, seems to be to do with secure to non secure redirects * login.staffproxy doesn't work in IE * login.staffproxy isn't required in chrome to get to normally blocked sites * Shopping just returns 'no results found' * Images are hit and miss - results page shows up everythime, but sometimes you can click on images and it takes you straight to the site the result is on, sometimes it pops up the grey preview bar.
X-13 Posted June 25, 2015 Posted June 25, 2015 @X-13 and @Steve21 are you still having problems with Google Images being borked? It definitely doesn't work here in IE or Chrome when using sslfilter.proxy.swgfl.org.uk - are you guys still having problems? Google Images works fine if using unfiltered connection. I'm about to log a call but it'd be handy to know if you or anyone else is still struggling. I'm not sure if it's the filter or not... I just gave it a test [searching for "fish" and "batman"] and the images loaded fine a few times in chrome, but then stopped loading. But a refresh fixed it. I have a feeling it's not the proxy that's the problem. Our proxy is rmplc.co.uk not swgfl.org.uk, so there may be a problem with yours but not ours.
Steve21 Posted June 25, 2015 Author Posted June 25, 2015 Yep deffo filter that broke Google Images Steve 1
AlViDA Posted June 26, 2015 Posted June 26, 2015 Hi folks, We're on sslfilter.staffproxy.rmplc.co.uk and left click isn't working on Google images in both IE11 and Chrome. Haven't found any information regarding a solution but any advice will be gratefully received. AlViDA
Steve21 Posted June 26, 2015 Author Posted June 26, 2015 Haven't found a resolution yet, workaround is hold control while clicking it Steve 1
AlViDA Posted June 26, 2015 Posted June 26, 2015 Thanks Steve21 I feel better knowing its not just me but at the same time worse that its affecting others! I've been right clicking and opening in a new tab but holding Ctrl works much better. Hopefully a fix will be just round the corner. AlViDA
X-13 Posted June 26, 2015 Posted June 26, 2015 The image problem is annoying, but it's less annoying that the page refusing to load...
vizubeat Posted June 26, 2015 Posted June 26, 2015 Looks like this is being filtered by SWGfL: https://www.google.co.uk/async/irc?async=iu:0,_id:irc_async,_pms:s Load that over HTTP and it's fine, HTTPS filters it. Looks like this is the script that loads the preview bar thing. Just trying to get the syntax right to unfilter it through the SWGfL filtering rules...
X-13 Posted June 26, 2015 Posted June 26, 2015 Looks like this is being filtered by SWGfL: https://www.google.co.uk/async/irc?async=iu:0,_id:irc_async,_pms:s Load that over HTTP and it's fine, HTTPS filters it. Looks like this is the script that loads the preview bar thing. Just trying to get the syntax right to unfilter it through the SWGfL filtering rules... Interesting... we're getting the same here. [so not SWGfL, as such]
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now