> SSCR Internet Admin wrote: > >I would like to ask if anyone from squid mailing list has stumble upon > >ultrasurf that can bypass any filtering products such as squidguard. I > >have setup a test pc with ip being blocked on squidguard. But to my > >surprise it bypass everything ive setup and with ultrasurf running on my > >test pc, IE internet setting has been changed to use 127.0.0.1 using port > >9666. On 22.01.08 17:27, Amos Jeffries wrote: > Never heard of them. But going by the documentation they are > HTTPS-tunneling all traffic from the localhost outbound. > > You and most would naturally allow HTTPS CONNECT requests through > without filters for all the banking and secure sites that need it. wouldn't disabling CONNECT any port except 443 be enough? (of course, firewall must be configured) -- Matus UHLAR - fantomas, uhlar@xxxxxxxxxxx ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759