preventing an IP address being used in Internet Explorer

[gwendes]

We have a problem with meebo.com. The kids are very talented when it comes to finding a new IP address for this site - even blocking entire x.x.*.* ranges there are more. What we've decided is we would like to block the use of any IP address for the students. Has anyone done this? We have just been adding any new addresses to the proxy exceptions list - is there a wildcard to throw *.*.*.* into the ether?

[ChrisH]

Best done using a proxy server. You need to set it to do a reverse lookup on IP addresses. This obviously is dependant on your proxy software.

 

Keyword filtering is also another must these days.

[marco84]

It can be done easily with Squid and Dansguardian, but im unsure of any other methods.

[gwendes]

Just looking for the simplest option - wanted to avoid software if possible. I'll keep looking a little bit longer, didn't want to introudce another proxy to our system!

[ChrisH]

In the long run you will find yourself needing to do more and more stuff so early adoption of a better more flexible system is easier in the long run.

[OutToLunch]

We have just been adding any new addresses to the proxy exceptions list - is there a wildcard to throw *.*.*.* into the ether?

 

... what proxy server are you already using?

[gwendes]

Just using the LEA proxy and the exceptions list in IE7 for ease and speed.

[webman]

You can do this in squidGuard using !in-addr.

[gwendes]

Looks like decent software - going to investigate Thanks

[NetworkGeezer]

Or as a bodge you could do a static route to obivlion for said IP.

[gwendes]

Unfortunately the IP keeps changing. I have come up with a bodge though. Proxy exceptions for 1/220.*.*.* - seems to work a treat but I ran out of space in the little text box so 221/255.*.*.* is still ok - if they find a meebo.com mirror there...

[ChrisH]

Keyword filtering for meebo would sort you out there.

[gwendes]

The LEA already block meebo - the kids use IP addresses - loads of them...

[NetworkGeezer]

Rather than tech fix you could also consider treating as a normal disciplinary matter. If you log activity and match it to users ask them to justify the use of IP addresses. If they can't then teachers neeed to take action.

[ChrisH]

I dont mean URL blocking I mean a filter that reads the web pages and can pick up the word meebo.

[gwendes]

Unfortunately the teachers are not consistant- this can be use of mp3 players in lessons, mobile phones, IM or other websites, email - I just want a simple, effective all out ban...

[GrumbleDook]

The LEA filters by keyword also ... you just need to get them to add 'meebo' into the list.

[gwendes]

They don't type in 'meebo' - they all use IP addresses. We've blocked a lot but they keep finding more. Blocking the majority this morning seems to have ruffled a few feathers so I think they'll find something else soon... got too much else to do atm

[marco84]

By blocking the keyword you are blocking any web pages that contain that word and not just pages where that word appears in the URL.

[gwendes]

Doesn't that make for a very difficult to use web experience? For example if I searched for information on blocking meebo? It is already filtered as 'webchat' through the LEA. What about sites that don't use the name in a text format - maybe the logo is an image?

 

Meebo is the first of many I fear...

 

For now my way is working and staff can still use the internet...

[webman]

There are dozens of web messengers out there. Phonefox.com is one of them.

[gwendes]

Perfect example. Phonefox.com is banned - classed as 'WebChat' by Websense. So is eBuddy. If you search for 'resolve ip' in google.com then select the first hit http://www.webyield.net/domainquery.html and do a reverse lookup on http://www.phonefox.com you get the IP 193.238.162.21

 

This IP is not banned. What I have done is to block everything that begins with a number x.*.*.* so students on the network can no longer use IP addresses. Am I missing something really obvious? Do other people have this problem?

[marco84]

I have squid & dansguardian set up as a downstream proxy from my LEAs. With dansguardian i have just blocked the use of IP addresses.

I just have it set up on an old dell GX280 512Mb RAM serving 200 - 300 clients happily.

[gwendes]

I have squid & dansguardian set up as a downstream proxy from my LEAs. With dansguardian i have just blocked the use of IP addresses.

I just have it set up on an old dell GX280 512Mb RAM serving 200 - 300 clients happily.

 

I think that installing Squid is the plan ultimately. This will need to be done with the other techs in the school though as I work in a training centre on the school site. My rack only has a DC, switch and uplink to the main server room. We seem to be running out of space for beige boxes running linux!

[localzuk]

Perfect example. Phonefox.com is banned - classed as 'WebChat' by Websense. So is eBuddy. If you search for 'resolve ip' in google.com then select the first hit http://www.webyield.net/domainquery.html and do a reverse lookup on http://www.phonefox.com you get the IP 193.238.162.21

 

This IP is not banned. What I have done is to block everything that begins with a number x.*.*.* so students on the network can no longer use IP addresses. Am I missing something really obvious? Do other people have this problem?

 

Does anyone else wonder about services like this? I would not like to use such a service as it is putting my password into a non-official page - without any privacy policy etc...