|
Posted by Flash Gordon on April 24, 2008, 2:46 am
If you were Registered and logged in, you could reply and use other advanced thread options
Chilly8 wrote, On 24/04/08 06:16:
> X-No-Archive: Yes
>
>
>> Chilly8 wrote:
>>
>>
>>> Most businesses are reliant on commercial filtering products that will
>>> not have these proxies in their filter lists for a few days. That is what
>>> one guy hawking 8e6's proxy dectector says. He says that without
>>> his product on your network, you are NEVER going to keep up
>>> with the flood of new php, cgi, and other public proxies appearing
>>> on the net every day.
>>>
>>> This is why I see traffic to my web sites coming from different proxies
>>> every day. Existing proxies are blocked, and new ones come in to
>>> take their place.
>>
>> Hey idiot, it's called "whitelist"...
>
> Whitelisting, however, requires expensive, and I mean EXPENSIVE
> filtering software. CyBlock can do whitelisting, but it is the ONLY
> product on the market that makes whitelisting feasible.
No it does NOT require expensive filtering software. My 100UKP home
router can do it for me. The cheap (in company terms) router used by my
company for our small office can do it. The proxy that is available for
free for Linux (which your free Linux firewall can redirect all the
connections from your Windows PCs to) can do it (and, indeed, it is what
a number of companies *do* use for free).
For wone example of a *cheap* router doing whitelisting see
http://www.draytek.com/product/Dual_Wan_Security_Router/Vigor2910i.php
I think all of the Draytek routers do it, even the ones that cost far
less than this.
Of course, you have been told about all the other SW that allows
whitelisting before.
--
Flash Gordon
|
|
Posted by Leythos on April 23, 2008, 5:28 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> Existing proxies are blocked, and new ones come in to
> take their place.
And on a properly secured network no proxies are available, not new
ones, not old ones, not any, on a properly secured network. No
additional work is needed to block access to them as more are made, it's
blocked by default on properly secured networks.
--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)
|
|
Posted by Chilly8 on April 26, 2008, 6:17 am
If you were Registered and logged in, you could reply and use other advanced thread options
X-No-Archive: Yes
If you have any large number of Asian/Chinese workers, get
ready for a lot of them attempting to listen to a new
"Canto-Pop" program that will be premiering my the station
soon. We just inked the deal for a program of Chinese-pop
hits, coming from Shenzen, China, to begin airing, as early
as this week. We still have to get the broadcast schedule
finalised, but we will soon be airing a program of "Canto-pop"
hits, aimed at Chinese, Taiwan, Macau, and Hong Kong
expats in Britain, Canada, and the USA, and it will be airing
during woking hours, most likely, on the U.S. west coast.
I am sure that admins will be going ape***t when all their
Asian workers start tuning into the show after it premieres
on the station, especially with the 96K feed. That will give
a few admins a headache.
Given the air time, I am sure there will be Asian workers
tuning in from the office, in Australia
.
|
|
Posted by Flash Gordon on April 26, 2008, 7:17 am
If you were Registered and logged in, you could reply and use other advanced thread options
<snip>
> I am sure that admins will be going ape***t when all their
> Asian workers start tuning into the show after it premieres
> on the station, especially with the 96K feed. That will give
> a few admins a headache.
Not at my company. Even if we could not easily use white lists so that
there was no chance of connecting the hardware (even at the small office
where we use cheap hardware) will tell us exactly which PC(s) is/are
using up the bandwidth. So within 60 seconds of there being a problem I
could tell the CEO who to discipline.
> Given the air time, I am sure there will be Asian workers
> tuning in from the office, in Australia
People breaking rules is not news. People getting disciplined for
breaking rules is also not news.
--
Flash Gordon
|
|
Posted by Flash Gordon on April 23, 2008, 6:11 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> X-No-Archive: Yes
>
>
<snip>
>> None of them work from any of my networks or customers network, and we
>> didn't have to do anything to block them....
>
> Most businesses are reliant on commercial filtering products that will
> not have these proxies in their filter lists for a few days. That is what
> one guy hawking 8e6's proxy dectector says. He says that without
> his product on your network, you are NEVER going to keep up
> with the flood of new php, cgi, and other public proxies appearing
> on the net every day.
Even on the cheapo Draytek Vigor 2950 load balancer all I had to do was
check the box to say we were using a URL white list and people could
*only* access the web sites we had explicitly allowed and then there was
no need to update it to block the new proxies. Oh, and I also check the
box telling it to forbid browsing by IP address.
Alternatively if I want to filter based on site categorisations I tell
it to block sites which are not categorised.
This is with a *cheap* device I can set it up in 5 minutes so that it
*never* needs updating to block new proxies since it does not allow
people to access anything they are not explicitly allowed to access.
With higher end devices I can do a lot more or exactly the same thing.
> This is why I see traffic to my web sites coming from different proxies
> every day. Existing proxies are blocked, and new ones come in to
> take their place.
Doesn't help with companies where the admin chooses to do things
properly. It only works from some places because the people running the
networks don't do things properly.
--
Flash Gordon
|
| Similar Threads | Posted | | Newest Proxies | January 8, 2008, 6:51 am |
| Newest Myspace Proxies | March 14, 2008, 9:24 am |
| Newest Proxy | September 29, 2008, 8:22 am |
| SANE 2006 early registration deadline is April 7, 2006 | March 30, 2006, 6:38 am |
| New Proxies | October 30, 2007, 1:40 am |
| New proxies | November 6, 2007, 7:23 am |
| New proxies | November 9, 2007, 10:30 pm |
| i need proxies | April 22, 2008, 8:53 pm |
| Websense and Proxies | February 1, 2005, 1:26 am |
| blocking web proxies | May 23, 2006, 4:34 pm |
|
XML site map