LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 03-27-2007, 12:25 AM   #1
suhas!
Member
 
Registered: Mar 2007
Posts: 100

Rep: Reputation: 17
Squid (Blocking tunneling sites)


Hi all,

Is there any way to block tunneling sites in squid.

We are using Squid server for quite a big network, there users are having access to all the sites except mails sites, jobs sites and porn sites. But users uses the tunneling sites which allows them to access any blocked sites easily. And to block every tunneling site is very tedious job as everyday new tunneling sites are emerging.

Also some users are using Proxy Bypassing Software. Do anyone have idea how to block Proxy Bypassing software?

Or any good idea about tightening Web access security in Squid, please suggest.


Thanks all.......
 
Old 03-28-2007, 01:28 PM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,379

Rep: Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963
well squid addons like dansguardian and squidguard provide url blocklists for things like that, but it's not somethign meant to be so heavily done in squid itself.

a word of warning, google is about the bext website anonymizer around... you aren't going to block that ehh? (actually you could filter the url to watch for the google engligh to english translation strings...)
 
Old 03-29-2007, 06:04 AM   #3
suhas!
Member
 
Registered: Mar 2007
Posts: 100

Original Poster
Rep: Reputation: 17
Thanx friend,

I searched for squidguard on internet, and I got readymade updated list of all porn, proxy, email etc. domains.

I am going to use this block list, hope this works!

Still if any other way is there then let me know.


Thanks a lot...
 
Old 03-30-2007, 02:29 PM   #4
drokmed
Member
 
Registered: Dec 2005
Location: St Petersburg, FL, USA
Posts: 219

Rep: Reputation: 30
We're using dansguardian with squid to block sites with *naughty* content. However, there really isn't any way to block all email and proxy sites. Heck, budweiser.com offers free email accounts. Anyone can setup a linux server at their home to accept/tunnel/etc.

What we do is implement office policies, and inform the users that we log (true) every single web page they visit. Then later, if a manager suspects misconduct, we can always pull up a listing of all sites visited, and discipline from there.

I'm sure there are people who abuse our system, but they all will eventually be caught. We make public examples out of abusers. It keeps everyone else honest.

Fear works
 
Old 03-30-2007, 02:41 PM   #5
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,379

Rep: Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963
this was a fairly interesting thread about http tunnel blocking... http://www.mail-archive.com/debian-f.../msg06958.html
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SQUID for blocking yahoo and msn [inc squid.conf] chrisfirestar Linux - Security 10 03-03-2008 08:33 AM
Squid Error while blocking sites winxandlinx Linux - Networking 15 06-29-2006 08:32 AM
controlling access through squid( blocking all sites except for one) jomy Linux - Networking 1 12-15-2004 06:27 AM
Blocking some sites... gani *BSD 2 11-05-2004 09:07 PM
Blocking porn sites debug019 Linux - Newbie 4 09-07-2004 01:13 AM


All times are GMT -5. The time now is 09:38 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration