Smoothwall not filtering gamepluto.com

[5tu]

We're battling to try and block access to gamepluto.com

 

Despite blocking QUIC traffic and adding both gamepluto.com and gamepluto-com.webpkgcache.com to explicit block lists, users still have access.

 

Can other Smoothwall customers test this on their network please?

[drewp]

For me gamepluto.com is in Video Games and Online Games, policy tester is showing it as being blocked for pupils.

Content modification policy "Remove QUIC Header" applied to everyone everywhere

 

What does the real-time webfilter logs show?

What does the policy tester show?

[5tu]

Logs and policy tester shows it's being blocked.... except it isn't!

 

And I have same content modification rule in place as you so I'm a bit stumped!

Edited February 8, 2024 by gybe78

[drewp]

Are the users on the devices being correctly identified and the correct policy being applied?

[5tu]

Yes they are - it's really odd

[drewp]

Done a test on a device that has the cloud filter agent and it blocks that site as Video Games, Online Games.

 

Are other sites in the policy being blocked?

 

Have you got a ticket opened with Smoothwall's Support Team?

[5tu]

Looks like the content might be loading via https://cdp.cloud.unity3d.com/v1/events and I also see log entries for https://www.semrush.com/website/_next/data/Aib3b30p57Iok7kW8mlIb/gamepluto.com/overview.json?domain=gamepluto.com which Smoothwall categorises as "Safeguarding Exclusions".

 

Device I'm testing with is using the on-prem filter. I'll test a device configured with the cloud filter.

 

Think I'll open a ticket with Smoothwall.

 

Thanks

Edited February 8, 2024 by gybe78

[drewp]

Could be cached content? Have you cleared browsing data on the devices?

[5tu]

Yes I thought that so have just logged on as a student onto a fresh client device and still get the same behaviour. Going directly to gamepluto.com returns a block page. But googling gamepluto and clicking on search result links somehow bypasses the block....

[drewp]

For me a google search for gamepluto is blocked - Do you have an HTTPS Interception policy enabled for search engines?

[5tu]

@ibpalle case #490104

[5tu]

For me a google search for gamepluto is blocked - Do you have an HTTPS Interception policy enabled for search engines?

 

I do yes

[TechMonkey]

Looks like the content might be loading via https://cdp.cloud.unity3d.com/v1/events and I also see log entries for https://www.semrush.com/website/_next/data/Aib3b30p57Iok7kW8mlIb/gamepluto.com/overview.json?domain=gamepluto.com which Smoothwall categorises as "Safeguarding Exclusions".

 

Device I'm testing with is using the on-prem filter. I'll test a device configured with the cloud filter.

 

Think I'll open a ticket with Smoothwall.

 

Thanks

 

We are having a lot of problems with online unity games and filtering. I think if the pupil has a bookmark direct to the game it goes through. Really hard to investigate as nothing obvious comes up in the logs and trying to look when they are actually on it is tricky. Had one that was supposedly on coolonlinegames.com, which is filtered, but was getting through. Filtered the game maker and that seemed to help a bit, but the game was still accessible.

 

Can't filter unity completely as the computing teacher uses it.

[Aprice]

We're also getting some strange issues with sites not blocking. We've got a student that is only allowed access to 365 and blocks 'everything' else which mostly works but still seems to allow some games through.

 

Policy Tester shows as blocking, however real time logs show not blocking.

 

Just had a session with Smoothwall and waiting for a new plan.

 

Tried both the QUIC modification and the Firewall rules.

[5tu]

Sorry to hear you're having similar problems but good to know we're not the only ones having trouble.

[5tu]

And this is where Smoothwall continually fall short - support just isn't there when you need it. Getting a response from 1st line takes too long and getting past 1st line is hard work.

 

I rarely open support tickets with Smoothwall but when I do I remind myself to start looking at other products.

[sigma]

Have you tried loading the game into urlscan.io a sandbox which will tell you all domains that are called?

 

Just tried it, nothing odd. Any games in particular that are not getting blocked?

Edited February 9, 2024 by sigma

[sigma]

Looks like the games are behind CloudFlare.

[TechMonkey]

That is a cool site, thank you @sigma. Bullet Force on CrazyGames.com was one we were having issues with, even with crazygames.com filtered and then looked at the creator and blocked all their domains. I think we have broken it enough that they don't bother but it still seems to get through.

[5tu]

Have you tried loading the game into urlscan.io a sandbox which will tell you all domains that are called?

 

Just tried it, nothing odd. Any games in particular that are not getting blocked?

 

Interesting. I've not heard anything from Smoothwall support but have just carried out further testing and all google search results for gamepluto now appear to be blocked. Nothing has changed on our config so I wonder if the blocklist has been updated by Smoothwall?

[5tu]

That is a cool site, thank you @sigma. Bullet Force on CrazyGames.com was one we were having issues with, even with crazygames.com filtered and then looked at the creator and blocked all their domains. I think we have broken it enough that they don't bother but it still seems to get through.

 

crazygames.com and content still accessible for me too despite explicitly being in custom blocked list. I don't get it...

 

EDIT: Content is being loaded from cdn.iubenda.com which falls into a few Smoothwall categories including "Safeguarding Exclusions". I'm guessing Safeguarding Exclusions are always allowed?

 

Edited February 9, 2024 by gybe78

[drewp]

Safeguarding Exclusions does not appear to be a standard category, must be a custom category that has been created on your site?

[5tu]

Safeguarding Exclusions does not appear to be a standard category, must be a custom category that has been created on your site?

 

I don't see it either under Policy Objects > Categories (Custom or Standard) but I do see it in web filter logs as per the screenshot above.

[tom_newton]

I have asked our team to take a look at these sites see if there's anything clever.

[5tu]

I don't see it either under Policy Objects > Categories (Custom or Standard) but I do see it in web filter logs as per the screenshot above.

 

Looks like this question has been asked before by @mdrabble....

 

https://www.edugeek.net/forums/internet-related-filtering-firewall/227583-smoothwall-safeguarding-exclusions-category.html

 

Can you shed any light please @tom_newton?