Posted: Thu May 06, 2010 11:47 am Post subject: URL Spoofing
Hi Gents,
Currently I am fighting with some websites eg:-kproxy,rocketopen.info ,which are used to bypass the proxy/firewall without even getting logged in any log monitoring device to access the blocked websites or you can call it as URL spoofing.
If I ll search on google for the list of those websites then there is lot and updates regularly.
So searching and blocking those URL on daily basis is not a good idea, so any has one faced this kind of issue in there organisation and if any one of you has implemented any kind os solution for blocking such websites on proxy/firewall/IPS or through any device then please let me know.
setup a squid proxy with dansguardian and for extra points add snort with emerging threats and make custom sigs for detect and blocking ssh tunnels etc
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum