HTTPS Proxies

[Sean_N]

Hi

 

I currently run ipcop using copplus but I am having some problems with students using https proxy sites to access facebook. I see the paid versions of censornet and smothwall can block them is there and opensource mod to deal with these ?

 

Thanks

 

Sean

[FN-GM]

you can use URL filter for smoothwall express or IPCop. i have used it on Smoothwall express and its not to bad.

 

URL filter add-on for IPCop and SmoothWall

[tom_newton]

AFAIK, none of the free versions do much other than pretty bog standard domain blocking - which is ineffective against proxies. You'd need to manually hack in some sort of ssl interception (squid3?)

[Sean_N]

Thanks

 

Will give that addon a shot hopefully only need to block the domains

 

Sean

[finbar3]

there is a mailing list from peacefire.org if you get on there mailing list, you can ban the sites straight away,however remember to block http/https and the ip address as https and ip adress get forgotten about.

[chazzy2501]

if the pupils never need access to an ssl site (mine don't) you could specifically setup their secure proxy transport in ie via GPO to point to it's self then no ssl traffic will work.

[finbar3]

can't spell

[finbar3]

another way they can get round things is using translation sites ie googal translate etc,

translate a english (address) site into say dutch and you will be able to get to, say facebook it may be in dutch but it still works.alot of the translation servives can act as proxy anonymizer

Edited January 27, 2010 by finbar3

[FN-GM]

another way they can get round things is using translation sites ie googal translate etc,

translate a english (address) site into say dutch and you will be able to get to, say facebook it may be in dutch but it still works.alot of the translation servives can act as proxy anonymizer

 

also if you used google chace view feature it will get round stuff if you block this ip it will stop them from doing that. - 209.85.229.132

[gdoyle]

Hi

 

I currently run ipcop using copplus but I am having some problems with students using https proxy sites to access facebook. I see the paid versions of censornet and smothwall can block them is there and opensource mod to deal with these ?

 

Thanks

 

Sean

 

Sean

 

Did you get a fix for this?

 

Same problem here - students got very creative when face book was filtered out here - instead of http://www.facebook.com they added in an "s" https://www.facebook.com and away they went again.

 

From reading in general about filtering - several people suggested using the ip address - but I can't find any programme or site that will give me the ip address for https ... facebook.

 

I'd apprecite any help you or anyone could give offer advice.

 

Gerry

[bio]

maybe you can take alook at OpenDNS | Internet Navigation And Security. They also have an option the block proxies. However blocking proxies is a continious battle.. Allways running behind the facts..

 

bio..

[tom_newton]

@gdoyle:

facebook.com. 139 IN A 69.63.187.19

facebook.com. 139 IN A 69.63.181.11

facebook.com. 139 IN A 69.63.181.12

facebook.com. 139 IN A 69.63.184.142

facebook.com. 139 IN A 69.63.187.17

 

That's what I get as the current IPs for facebook (HTTPS or otherwise it matters not). It may be that this does the job, it may not - depends how you are set up.

 

Hope that helps

[gdoyle]

Tom, your a gent - thanks will try these when I'm back in work on Monday.

 

Gerry