We have Premium Content Filtering on our system and all of the sites listed below were stopped by the SonicWall.  However, today I found 2 sites, https://www.schoolister.com and https://www.allaboutabe.com that the SonicWall did not block.  It blocked the http side but did not block https.  I put ACL’s on my Router’s outbound interface to block them.  These sites were some of the most sophisticated I have seen using javascript to mask the site as usatoday’s website  to try and fool the Firewall.  Hopefully this is not a trend.

 

From: School Information Technology Discussion [mailto:[log in to unmask]] On Behalf Of David Curtis
Sent: Thursday, April 12, 2007 7:29 AM
To: [log in to unmask]
Subject: Re: proxy sites and SonicWall

 

The Sonicwall will only work in this fashion if you have the content filter license. It is also only as good as the filtering people. Do you have a current Content Filter license? You can also manually add these sites on a block page even if you do not have the content filter.

 

From: School Information Technology Discussion [mailto:[log in to unmask]] On Behalf Of Sigurd Andersen
Sent: Wednesday, April 11, 2007 10:33 PM
To: [log in to unmask]
Subject: proxy sites and SonicWall

 

While browsing through our SonicWall (SOHO3) settings,
I came across one that says it is for having the SonicWall block proxy servers.
(I don't have my notes at the moment to give a more precise description.)
I tried setting this, but it seemed to be completely ineffective.
After setting it, I tried using a number of proxy servers listed on www.proxy.org
and through them getting to www.facebook.com (which I have set to be blocked by our SonicWall).
Got to facebook every time.

Is there no reasonable way to block proxy servers -- and if not, doesn't that mightily decrease the value of web filters?

Sigurd Andersen

Raymond Ballou wrote:

Dear List:

 

I have the ability to block URLs

I can block URL keywords like proxy (blocks myproxy.com, but also proxyz.com [potential for unintended consequences])

 

My new strategy is that I can have certain words/combinations listed on a page trigger a block (PHPproxy or CGIproxy listed on the page = block)

Can't do that with filter or tunnel though, too many false positives ... but I am hoping the people who run these sites like to brag or at least mention which type they use.

 

below are some of the latest, only had one known student visit 1 site (turned in a faculty member) but all these were unblocked as of today.

 

R.

 

letmethrough.info
SneakMeIn.info
SneakWithPride.info
SneakyFilter.info
SneakyTunnel.info
HideMyBrowser.info
FacebookTunnel.info
SuperSneaky.info
SurfInvisible.info
SnoopBypass.info
PassFilters.info
IgnoreBlocks.info
GoToFaceBook.info
HideBehindThis.info
SneakyWebProxy.info.info
MySpaceTunnel.info
Sneak2FaceBook.info
Sneak2MySpace.info
SneakMySpaceProxy.info
SuperProxyerver.info
Sneak2.com
Sneak2.net
FacebookTunnel.info
SuperSneaky.info
SurfInvisible.info
SurfTunnel.info
zomble.com
unblockmyspace.com
fukoff.info
pleaseunblock.com
surfbebo.com
proxe.info
proxanon.com
firewalldown.net
filterjam.com
browseatschool.net
mehidden.com
browseatschool.net
nfan.org
hideurip.net
omgbrowser.com
guglpages.com
foxprox.net


______________________________________________________________ ______________________________________________________________
This email may contain information protected under the Family Educational Rights and Privacy Act (FERPA) or the Health Insurance Portability and Accountability Act (HIPAA). If this email contains confidential and/or privileged health or student information and you are not entitled to access such information under FERPA or HIPAA, federal regulations require that you destroy this email without reviewing it and you may not forward it to anyone.
--
This message has been scanned for viruses and
dangerous content by MailScanner ,ClamAV and Bitdefender, and is
believed to be clean.