[isalist] Re: Advanced Proxy Sites

  • From: "Ball, Dan" <DBall@xxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 11 Apr 2006 20:06:16 -0400

http://www.ISAserver.org
-------------------------------------------------------

I located a copy of the program in question.  Just do a Google search
for "ultrasurf" and you should be able to find a downloadable copy.

It's a 103K file that runs without installing.  It looks like all IE
traffic is then encrypted and rerouted transparently through some
"random" proxy sites on the Internet.

I've got the program running now in a virtual computer, trying to figure
out how it passes through the ISA server a bit better...


-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thor (Hammer of God)
Sent: Tuesday, April 11, 2006 12:27 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Advanced Proxy Sites

http://www.ISAserver.org
-------------------------------------------------------
  
Yep- you can't block everything.  The answer is "it depends."  If the
proxy
sites implement the proxy in a consistent way where you can examine the
headers for data, then it would work.  If not, you'll have to come up
with
something different.

You won't be able to block everything you (or they) consider "deviant"
any
more than you could ask the teachers to guarantee that they immediately
identify and correct issues with "problem" children in class.   They
should
"get" that analogy.

t


On 4/11/06 9:05 AM, "Ball, Dan" <DBall@xxxxxxxxxxx> spoketh to all:

> http://www.ISAserver.org
> -------------------------------------------------------
> 
> I haven't yet encountered one of these sites personally; it is more of
a
> concept thing right now.  One of those situations where someone reads
an
> article, panics at the thought, and demands that I provide an answer
on
> how to stop it...
> 
> My answer is that everything can't be blocked, no matter what.  It
would
> be better to spend time on educating the teachers to identify deviant
> behavior so we can head it off before it blossoms.
> 
> Buy, anyways, they want an answer on how I could block those types of
> sites...
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thor (Hammer of God)
> Sent: Tuesday, April 11, 2006 11:51 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Advanced Proxy Sites
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> Have you examined the HTTP headers to see if there is some consistent
> data
> in the stream that can be blocked?
> 
> t
> 
> 
> On 4/11/06 8:25 AM, "Ball, Dan" <DBall@xxxxxxxxxxx> spoketh to all:
> 
>> http://www.ISAserver.org
>> -------------------------------------------------------
>> 
>> No reply, will ask again.  Is there any way you can think of to block
>> proxy sites that change IP addresses daily?
>> 
>> -----Original Message-----
>> From: Ball, Dan 
>> Sent: Monday, April 10, 2006 7:31 PM
>> To: 'isalist@xxxxxxxxxxxxx'
>> Subject: Advanced Proxy Sites
>> 
>> Proxy sites are getting more sophisticated, does anyone know how we
>> could detect/avoid sites as described in these articles?
>> 
>> 
>> 
>
http://www.washingtonpost.com/wp-dyn/content/article/2006/02/20/AR200602
>> 2001305_pf.html
>> 
>> 
>
http://www.uscc.gov/hearings/2005hearings/written_testimonies/05_04_14wr
>> ts/mulvenon_james_wrts.htm
>> 
>> ------------------------------------------------------
>> List Archives: //www.freelists.org/archives/isalist/
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server Articles and Tutorials:
>> http://www.isaserver.org/articles_tutorials/
>> ISA Server Blogs: http://blogs.isaserver.org/
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>> Report abuse to listadmin@xxxxxxxxxxxxx
>> 
>> 
>> 
> 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: