Vulnerability Development mailing list archives

Re: N2H2 Web Proxy/Filter appliance


From: mark () NS1 LOONEY COM (Mark)
Date: Sat Jun 17 01:13:22 2000


Now : Change your browser settings from "use a proxy" to "Direct
connection to the internet" and guess what? You've just disabled the
censoring proxy in three seconds. Oh, great. Amazing what simple
stupidity can do.

Indeed.  I've seen some of our kids get around some of the things that our
webmasters have put up trying to "protect" certain web pages, and they did
it in a matter of seconds.  It's amusing :)

That is one of several reasons we are using unrouted internal addresses
and requiring all communications with the outside travel through proxy
servers.  You disable web proxy/filter server, you don't surf.  :)

We could also set up silent proxying on the site routers, such that all
traffic except from the proxy servers goes through the proxy server, but
unrouted addressing provides the extra benefit of (virtually) limitless
IP address space internally, so that we need only purchase a single class
C block for our entire district.

mark


Current thread: