Re: [squid-users] ULTRASURF (anti-filtering program) problem

From: Matus UHLAR - fantomas <[email protected]>
Date: Thu, 24 Jan 2008 15:01:23 +0100

> SSCR Internet Admin wrote:
> >I would like to ask if anyone from squid mailing list has stumble upon
> >ultrasurf that can bypass any filtering products such as squidguard. I
> >have setup a test pc with ip being blocked on squidguard. But to my
> >surprise it bypass everything ive setup and with ultrasurf running on my
> >test pc, IE internet setting has been changed to use 127.0.0.1 using port
> >9666.

On 22.01.08 17:27, Amos Jeffries wrote:
> Never heard of them. But going by the documentation they are
> HTTPS-tunneling all traffic from the localhost outbound.
>
> You and most would naturally allow HTTPS CONNECT requests through
> without filters for all the banking and secure sites that need it.

wouldn't disabling CONNECT any port except 443 be enough?

(of course, firewall must be configured)

-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759
Received on Thu Jan 24 2008 - 07:01:39 MST

This archive was generated by hypermail pre-2.1.9 : Fri Feb 01 2008 - 12:00:05 MST