Unfortunately there are many proxy from where users can still browse. Blocking all is impossible as when you are blocking one two other emerges. Fortunately there are sites like opendns.com from where you can block porn sites or proxy sites like the-cloak.com with a single click. Here is a small tutorial on it http://techspalace.blogspot.com/2008/01/blocing-pornography.html On Jan 27, 2008 2:39 AM, Marcus Kool <marcus.kool@xxxxxxxxxxxxxxx> wrote: > Bob, > > blocking proxies is challenging... > the-cloak.com can easily be blocked by the free ufdbGuard (it > is a Squid redirector) because it has an invalid SSL certificate > and ufdbGuard has an option to block that. > But there are many more HTTP-based proxy sites and to block those > you need a URL database. > You can try a free or a commercial URL database (you can use either > one with ufdbGuard). > > I represent a commercial URL database vendor (http://www.urlfilterdb.com). > For the sake of comparison with free URL databases: > URLfilterDB has today 29230 domains, 31796 urls and 18 regular expressions > for the URL category "proxies". > > Marcus > > > > Bob Morrison wrote: > > Does anyone have any suggestions on how I can use squid to prevent > > our students from by passing content filtering by using > > an anonymous https: proxy server such as "the-cloak.com"? > > > > I've tried a few techniques things with IPTables but they are becoming hard > > to manage. > > > > Any ideas are welcome > > > > > > Thanks in advance for any suggestions > > > > > > Bob Morrison, CNE, MCSE > > > > > > >