Re: By passing surf control

From: Dave Powell (davep+_at_pitt.edu)
Date: 02/26/04

  • Next message: Nick Besant: "RE: manipulating query strings"
    Date: Wed, 25 Feb 2004 18:25:26 -0500
    To: Kudakwashe Chafa-Govha <KChafa-Govha@bankunitedfla.com>, pen-test@securityfocus.com
    
    

    Hi! I recall reading an old 2600 article where they showed how to
    convert a regular IP address to some other formats, as most browsers
    will accept a number of different address encodings.

    for 2 or 3 ways to do this check out
    http://archives.neohapsis.com/archives/sf/pentest/2001-04/0191.html

    http://honor.trusecure.com/pipermail/firewall-wizards/2001-March/010504.html
    says that the 2600 issue is Vol 17, #3, Fall 2000 (www.2600.com), p43
    (I don't have it here in front of me to check :)

    BTW: List, do you think an iptables filter on the proxy/webfilter set to
    deny all traffic from offending sites would work?

    hope this helps!

    DaveP

    Kudakwashe Chafa-Govha wrote:

    >Hello Group,
    >
    >
    >Does anyone have any information on how to by pass a web content filter? We
    >use Surf Control to monitor and filter web content. However, I have one of
    >my users who was able to by pass this. We tried using a proxy to by pass
    >just for testing purposes but it did not work. I am still trying to figure
    >out what other method he used to do so. If anyone has any information , it
    >will be greatly appreciated.
    >
    >Thanks
    >
    >Kuda
    >
    >
    >

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------


  • Next message: Nick Besant: "RE: manipulating query strings"

    Relevant Pages

    • Re: Cross-browser setOpacity() without browser sniffing?
      ... I think the reasoning makes sense for the Yahoo! ... So for the browsers that don't have ActiveXObject ... and that object has a testable - filter - property that is a string. ... assigning to - style.filter - exists. ...
      (comp.lang.javascript)
    • Re: Creating a sample grabber to connect to YUY2 / VideoInfo2
      ... >I want the MS sample grabber to work with DVDs and MPEG-2 files. ... >require it to be able to attach to Video Info 2 formatted streams. ... DIBs in YUV formats are always top-down. ... You can't do this with a trans-in-place filter if you're hooking the filter ...
      (microsoft.public.win32.programmer.directx.video)
    • Re: Cross-browser setOpacity() without browser sniffing?
      ... I think the reasoning makes sense for the Yahoo! ... So for the browsers that don't have ActiveXObject ... and that object has a testable - filter - property that is a string. ... assigning to - style.filter - exists. ...
      (comp.lang.javascript)
    • Re: Async Filter question
      ... You will need to add a custom interface with a 'queue for streaming' method ... and you must be sure that the formats of each successive file are identical. ... The most generic solution is to build a source filter which is fed by sink ... an end the next is switched in to the source of the output graph. ...
      (microsoft.public.win32.programmer.directx.audio)
    • Aspect Ratio DS filter
      ... adjust various input formats to a 16:9 display. ... the filter samples that come with the directshow SDK. ... But digging into video ...
      (microsoft.public.win32.programmer.directx.video)