Re: [squid-users] auto blacklist users

From: ian j hart <ianjhart@dont-contact.us>
Date: Thu, 6 Dec 2007 17:50:21 +0000

On Thursday 06 December 2007 00:29:30 Adrian Chadd wrote:
> I've been trialing a set of test commercial services locally, including
> proxy site filtering. I've written a series of external ACL helper plugins
> to do things like phishtank/safebrowse filtering, match against some
> malware RBL lists and these proxy lists.
>
> Paying clients can download the proxy site lists and also submit new proxy
> site lists and help correct errors.
>
> I wasn't planning on going live with this until the appliance was built
> (early next year) but I'm happy to break out just this particular module
> and offer it at a discounted rate per-server.
>
> Its commercial because someone has to keep the lists updated and write new
> modules. As a server admin (or an appliance buyer!) you only have to care
> when the automated updates stop. Other than that things will just "keep
> working."
>
> If you're interested in this then please let me know and I'll pass on some
> per-server and site pricing.
>
> Thanks!
>

Thanks , I'll bear this in mind.

>
>
>
> Adrian
>
> On Wed, Dec 05, 2007, ian j hart wrote:
> > Hello.
> >
> > [sorry, slightly off topic]
> >
> > I'm the ICT technician of a school. I have squid running to make the most
> > of our bandwidth. Our ISP provides some content blocking but this is
> > proving ineffective against the proliferation of proxy sites.
> >
> > I've started to monitor and block sites with squid ACLs. This is also not
> > so effective as there are 1200 users looking for new sites and only 1
> > user trying to block them.
> >
> > Since there is no punishment for hitting any DENY ACL there's no reason
> > for them to stop.
> >
> > What I need is to apply some back pressure, i.e. automatically block
> > persistant offenders.
> >
> > Does anyone have anything like this?
> >
> > N.B. This has to be user based. Host/IP based will not work due to the
> > hot seating.
> >
> > Thanks
> >
> > --
> > ian j hart

-- 
ian j hart
Received on Thu Dec 06 2007 - 10:50:45 MST

This archive was generated by hypermail pre-2.1.9 : Tue Jan 01 2008 - 12:00:01 MST