ISA in SBS - yes, it's secure

A central location for SBS ISA specific configuration information relevant to small consulting practices and others smart enough to use the best technology in the world.

Lingo - The Talk of Broadband

Thursday, April 13, 2006

Internet Proxies can by-pass your ISA settings

Today I learned from Steve Moffat about Internet Proxies. The type of proxy we're talking about here are websites that filter the Internet for you. Traditionally these were used by schools to filter the Internet in a manner appropriate for children. When I was in the educational tech support business most schools subscribed to a service to filter the Internet for them. On the tech end we'd redirect all Internet requests to the site we subscribed to and simply didn't allow any other sites. Worked great.

Of course, someone figured out, and about 700 or so people copied the idea, that they could put up an Internet proxy that does no filtering. Why? To get around the URL blocking that you've put in place of course. Say you're blocking users from getting to yahoo mail, if the user can get to the proxy site they can enter mail.yahoo.com and bring up yahoo mail and your URL blocker is none the wiser because the mail site is being viewed from within the proxy site. Fun!

The solution is to get Steve's proxy site block list.

2 Comments:

At 7:47 PM, Anonymous Steve Moffat said...

Who's this Stevel Moffatt???...:)

 
At 9:18 PM, Blogger happyfunboy said...

oh yeah...hate those open proxies.

i'm thinking i should customize our "denied" message to read...

get back to WORK, you SLACKERS!

 

Post a Comment

<< Home