Bypass School Security Filter

[xkevinxpwndu]

I work IT for our school district.  All traffic on our network runs though our local proxy server and then our server runs through the state proxy server.  I'm assuming the school is using Windows.  If they are get UltraSurf.  We use is here because the state blocks gmail, Yahoo mail, and anything else that is not Microsoft. 

[ande]

I work IT for our school district.  All traffic on our network runs though our local proxy server and then our server runs through the state proxy server.

Exactly like my old school did it; But a proxy will pretty much always work.

We use it here because the state blocks gmail, Yahoo mail, and anything else that is not Microsoft. 

Thats rather harsh. Actually, sounds like something that should be checked up against some laws. Microsoft gotta stop their monopoly game...

[xkevinxpwndu]

Its in our Microsoft agreement :/ 
It's not that bad though because it is easy to get around. 
 
As for using a proxy server, unless you have district admin rights all proxies are blocked.  Recently we opened up most websites other than Email sites, porn, and anything having to do with guns or other weapons.

[ande]

Its in our Microsoft agreement :/ 
It's not that bad though because it is easy to get around. 
 
As for using a proxy server, unless you have district admin rights all proxies are blocked.  Recently we opened up most websites other than Email sites, porn, and anything having to do with guns or other weapons.

Tell me, how do you block something that can use any protocol, any port and look like anything? (a proxy)

You don't actually have to answer that, its impossible. Proxies cannot be blocked.

[xkevinxpwndu]

Tell me, how do you block something that can use any protocol, any port and look like anything? (a proxy)

You don't actually have to answer that, its impossible. Proxies cannot be blocked.

I should have worded it a little better.  We block the URL's for proxies.  Our filter searches pages for proxie tags and blocks according to that.

[ande]

I should have worded it a little better.  We block the URL's for proxies.  Our filter searches pages for proxie tags and blocks according to that.

Will only stop the guys who barely know what a proxy is. The people who wants to use a proxy, will find one.

I don't support blocking proxies, however. If you guys want a bit more robust way of blocking proxies, check out Snort. You can filter connections that contains HTML fragments of the top 10 known web proxies for an example. Or filter based on URL, etc etc. There are no limits. Additionally, you will get logs of when, who and where a proxy was attempted visited and if you run Snort in in-line mode you can immediately drop the connection in real-time.

[xkevinxpwndu]

Will only stop the guys who barely know what a proxy is. The people who wants to use a proxy, will find one.

I don't support blocking proxies, however. If you guys want a bit more robust way of blocking proxies, check out Snort. You can filter connections that contains HTML fragments of the top 10 known web proxies for an example. Or filter based on URL, etc etc. There are no limits. Additionally, you will get logs of when, who and where a proxy was attempted visited and if you run Snort in in-line mode you can immediately drop the connection in real-time.

 

Thanks, I will check in to it.  We as a district really don't care what students/Faculty are able to access, the state decides for us.  If the state says we have to block proxies then we have to do it to the best of our ability.

[TheUnknown]

use: www.hidemyass.com


works like a charm for me

[ande]

use: www.hidemyass.com


works like a charm for me

Old topic is old. Proxies have been discussed.

[ovi_x]

use  Vpn it passes  any  tipe  off protection   we  have  protection  at  work  against  facebook ,yahoo, and  other  social  networks , I used  tor and proxyes  nothing  was  able  to pass  it  but  Vpn  was  the  answear

[ande]

use  Vpn it passes  any  tipe  off protection   we  have  protection  at  work  against  facebook ,yahoo, and  other  social  networks , I used  tor and proxyes  nothing  was  able  to pass  it  but  Vpn  was  the  answear

Come on guys. Dont be stupid. There is no universal fix for bypassing filters. It will all depend on the guys in charge for blocking you out.

Both proxies, vpn, custom DNS servers and so forth might work. But that all depends on the system you are as well. Take my school for an example. We had limited users on windows systems, we could not change DNS settings, proxy settings nor install VPN software. The only way bypassing anything there was to use web proxies. But they are not perfect, far from actually. Most does not work with facebook for instance.

Bottom line is, you want to route or hide your traffic. Meaning, some sort of proxy or proxy'ish solution is needed. Things like we have already discussed, web proxies, socks4/5 proxies, http proxies, VPN or other proxy solutions. Alternatively, get a mobile network solutions

[ovi_x]

don't  get mad  Ande VPN solves  the  problem  in  a  esy  and  elegant way, just dumps  the local  conection , and all trafic  is  redirected  trough the tunnel , plain and  simple  it doesen't  mether  what  tipe  of  filtering  it  does,  couse  the  gateway  it's been changed  and thouse meaning  the trafic it's  solved  by the vpn host

[ande]

don't  get mad  Ande VPN solves  the  problem  in  a  esy  and  elegant way, just dumps  the local  conection , and all trafic  is  redirected  trough the tunnel , plain and  simple  it doesen't  mether  what  tipe  of  filtering  it  does,  couse  the  gateway  it's been changed  and thouse meaning  the trafic it's  solved  by the vpn host

It absolutely does matter on the filter. Many networks does forced proxy traffic, in which case any attempt to do other than http, https and sometimes ftp traffic will fail miserable. Most networks will block off all other ports than 21, 80 and 443, in which case any connection to a VPN will most likely fail. Some might even have traffic sensors in place, looking for things like proxies, VPN's and other solutions.