RE: By passing surf control

RMcElroy_at_mbe.com
Date: 02/25/04

  • Next message: Ben Nelson: "Scanning tool that will track and report diffs" 
    Date: Wed, 25 Feb 2004 17:07:41 -0500
To: <KChafa-Govha@bankunitedfla.com>, <pen-test@securityfocus.com>

    It depends on the system, some systems do not recognize uni code
    requests for websites thereby not blocking them. You can use a web based
    proxy, although if you make a rule to block those then they cannot get
    to them. Also if I set up a proxy on my box at home that I could get to
    I could proxy my traffic through my home box and get out that way. Also
    it depends on how your web filter is configured, transparent proxing or
    as a proxy server itself. There are some host based applications that
    will encrypt data being sent out to the network that would allow you to
    bypass as well. Hope this helps

    -----Original Message-----
    From: Kudakwashe Chafa-Govha [mailto:KChafa-Govha@bankunitedfla.com]
    Sent: Wednesday, February 25, 2004 1:04 PM
    To: 'pen-test@securityfocus.com'
    Subject: By passing surf control

    Hello Group,

    Does anyone have any information on how to by pass a web content filter?
    We use Surf Control to monitor and filter web content. However, I have
    one of my users who was able to by pass this. We tried using a proxy to
    by pass just for testing purposes but it did not work. I am still trying
    to figure out what other method he used to do so. If anyone has any
    information , it will be greatly appreciated.

    Thanks

    Kuda

    ************************************************************************
    **************************
    The contents of this email and any attachments are confidential. It is
    intended for the named recipient(s) only. If you have received this
    email in error please notify the system manager or the
    sender immediately. Unless you are the intended recipient or his/her
    representative
    you are not authorized to, and must not, read, copy, distribute, use or
    retain this
    message or any part of it.
    ************************************************************************
    **************************

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
----
---------------------------------------------------------------------------
----------------------------------------------------------------------------
  • Next message: Ben Nelson: "Scanning tool that will track and report diffs"

    Relevant Pages

    • Re: Afternoon scores ...
      ... McCain Falls Flat with Vets Group ..... ... same thing via a proxy on thier own PC - FOR FREE. ... to someone else.They can fine tune it any way THEY prefer. ... I can filter individuals but I would ...
      (rec.boats)
    • Re: Blocking Access to web-based email
      ... > two different proxy servers, one filtered, and one ... > authentication, the other non-filtered proxy ... > full access can log into ProxyPro, ... It can filter IM by examining the packets, so it can't be fooled by falling ...
      (comp.security.firewalls)
    • Re: Afternoon scores ...
      ... McCain Falls Flat with Vets Group ..... ... same thing via a proxy on thier own PC - FOR FREE. ... to someone else.They can fine tune it any way THEY prefer. ... I can filter individuals but I would ...
      (rec.boats)
    • Re: Proxy Server - web filtering?
      ... A word filter is only going to be partially effective. ... Expanding it to include other detestable words, can end up blocking ... certain addresses, and you can use their block list, with a local proxy, ... and the Squid documentation has hints about blocking ...
      (alt.os.linux.redhat)
    • RE: [fw-wiz] Proxy - content filter related
      ... Force the little ones through the proxy by making it the ... If the kids are using tunneling software that goes via legitimate channels, ... you would have to stick a *BSD or *Linux ... filter traffic. ...
      (Firewall-Wizards)