Re: Blocking web-based proxy traffic

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> Interesting idea.  I know that when I've captured this proxy traffic I see
> in ASCII "http://"; and then whatever proxied site (usually myspace).  I was
> thinking maybe a matchstring type thing?  Here's a snippet from an
> access.log from a transparent squid proxy, using sureproxy hitting playboy:
>
> 10.1.1.191 - - [28/Nov/2007:12:49:26 -0700] "GET
> http://www.sureproxy.com/nph-index.cgi/011110A/http/www.playboy.com/imx/fron
> tpage/2008-calendars.jpg HTTP/1.1" 200 366
> "http://www.sureproxy.com/nph-index.cgi/011110A/http/www.playboy.com/";
> "Opera/9.24 (Macintosh; Intel Mac OS X; U; en)" TCP_MISS:DIRECT
>
> Does my idea make sense or am I on crack :D
>
> James

If you have a transparent squid proxy in place you can do ACL's and/or
use squidguard or dans guardian.

-- 
Tagg McDonald
Dutro Company
675 North 600 West
Logan, UT 84321
(435) 752-3921 x146

-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux