Full Disclosure mailing list archives
RE: Proxies
From: S G Masood <sgmasood () yahoo com>
Date: Fri, 31 Oct 2003 13:58:28 -0800 (PST)
It is more or less impossible with current technology to set up an automated system to *completely* prevent users from accessing certain HTTP content. What I mean here is that everything available can be bypassed. How do you block *all* HTTP proxies, for instance(a la Surfola and party)? How about custom written CGI proxies? How about JAP like software?
You could do a couple things to detect that people were using proxies though. Parse through your logs / ip accounting for repeated hits to hosts on port 80 and the source ip, have it email you those ips and investigate.
IMHO, these kind of measures are the only thing you can do to enforce your content access policies. -- S.G.Masood Hyderabad, India. __________________________________ Do you Yahoo!? Exclusive Video Premiere - Britney Spears http://launch.yahoo.com/promos/britneyspears/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Proxies, (continued)
- Re: Proxies Gary E. Miller (Oct 31)
- Re: Proxies nosp (Oct 31)
- Re: Proxies Charles E. Hill (Oct 31)
- Re: Proxies Valdis . Kletnieks (Oct 31)
- Re: Proxies Ben Nelson (Oct 31)
- Re: Proxies Richard Spiers (Oct 31)
- RE: Proxies adam.richards (Oct 31)
- Re: Proxies Ben Nelson (Oct 31)
- Re: Proxies Richard Spiers (Oct 31)
- Re: Proxies Jakob Lell (Oct 31)
- RE: Proxies Bassett, Mark (Oct 31)
- RE: Proxies S G Masood (Oct 31)