Re: [squid-users] ULTRASURF (anti-filtering program) problem

> SSCR Internet Admin wrote:
> >I would like to ask if anyone from squid mailing list has stumble upon
> >ultrasurf that can bypass any filtering products such as squidguard. I
> >have setup a test pc with ip being blocked on squidguard. But to my
> >surprise it bypass everything ive setup and with ultrasurf running on my
> >test pc, IE internet setting has been changed to use 127.0.0.1 using port
> >9666.

On 22.01.08 17:27, Amos Jeffries wrote:
> Never heard of them. But going by the documentation they are
> HTTPS-tunneling all traffic from the localhost outbound.
>
> You and most would naturally allow HTTPS CONNECT requests through
> without filters for all the banking and secure sites that need it.

wouldn't disabling CONNECT any port except 443 be enough?

(of course, firewall must be configured)

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759