CensorNet

Hi Chris, I think you must mean v4 (CensorNet Professional) as the v3 branch was open source and there's no subscription to pay on that (in fact the project has been closed since 2006). However, if you are indeed still using v3 then please contact us regarding a special upgrade path for users of the original version. Kind regards, Tim

Sorry, didn't mean to be anonymous It's Tim here - MD of CensorNet. I'll try and set a sig in the settings

Skype usage is really hard to track. As it is a peer to peer application it uses many different IP's over SSL tunnels to connect to other Skype users and lots of random port numbers. If Websense can do L7 filtering you can probably manage it but I don't think you could rely on a particular domain name to identify Skype. This is a detailed explanation of Skype protocol (not for the faint hearted!) http://www.blackhat.com/presentations/bh-europe-06/bh-eu-06-biondi/bh-eu-06-biondi-up.pdf

Hi Ben, Tom's right, Microsoft released some hot fixes to tighten up security and this meant we had to patch up Ubuntu which CensorNet runs on. If you upgrade, your problem will be resolved. Feel free to contact us on the help desk for assistance. Tim

Yep this is most likely your problem - if you don't allow the CDN (Content Delivery Network) you won't get any styles or pictures

Hi, Does the web browser the teacher has access to have the same security settings as the administrator browser (e.g. security settings, enabled Javascript, etc). I suspect it has JavaScript disabled which Hotmail uses when you click a message. Have you tried with a different browser e.g. Firefox / Chrome to see if it is a problem with IE 7 only? Thanks Tim

Hi, If you want to match specific sites (URL's) you will need to use shExpMatch to match the domain and path. Just off the top of my head, a wpad.dat file to do what you ask would look like this (replace 10.0.41.15:8080 with your proxy IP and port): function FindProxyForURL(url, host) { // Add hostname exceptions for sites you do want to proxy // First line is a normal web site // Second line is a HTTPS or site with a different port number other than 80 if(shExpMatch(url,"*.proxythis.com/*")) { return "PROXY 10.0.41.15:8080"; } if(shExpMatch(url,"*.proxythis.com:*/*")) { return "PROXY 10.0.41.15:8080"; } // If no matches found, use default route return "DIRECT"; } I should also point out that in some versions of Internet Explorer the browser will try and go direct to the Internet even if you tell it not to by checking "Automatically detect network settings". The only way to force it to use the WPAD file is to firewall off port 80 and 443 unless it comes from the proxy IP, but this of course would defeat the object of what you want your WPAD file to do. I am not sure if these bugs have been fixed in later versions of IE. Good luck

Sounds like it could be a DNS issue

Hi Oggster - the URL will be in the overnight update, but yes, the image filter did catch the image which is good news. Clever site - not a lot of text to go on for dynamic analysis

Thanks Tom ;-)

Hi Runcmd I just wanted to say, which is hopefully useful to other members, that CensorNet v3.x hasn't been updated since 2006. It is end of life and no longer in development as an open source project. There is a migration path to the new version if people are interested. There are still many people that use it and we have kept the web site live for reference and historical reasons. It is based on an old version of Debian which no longer receives security updates so it should not be used in production if at all possible. Kind regards, Tim