ISP hosted filter question

[sigma]

Has anyone else found other users (totally non-school related) getting blocked in their school's ISP hosted web filter?

 

They got blocked trying to access web proxies, so I was always going to notice. I've blocked the IP addy in the filter now, but it’s still very active getting constantly blocked.

 

It’s from an EU based IONOS IP addy and I think there's a good chance it’s an XBOX. Some of the urls it’s trying to access have a county indicator of PH - Philippines? Maybe that's the actual origin?

 

Anyway, our ISP are not bothered by it, and I've had to exclude its activity from my usual reports as there are so many entries, and set up a separate report for it.

 

I am bothered by it. I feel we are accountable and there's nothing I can do about it.

Edited January 10, 2024 by sigma

[CHiLL]

I don't think it's just limited to you or hosted filters. We see a lot of IPs attempting to access on our on-site firewall/filter. There's probably no point blocking IPs on an individual level. If the attempt is being blocked/dropped, then at least the firewall is doing it's job. You'd probably be best ensuring that your rules/policies are all tightened up, and only allow the specific ports, destinations, etc you need and don't allow any others that aren't needed (not specified = no access by default).