[7.080] HTTP Proxy - blacklists not effective [NOTABUG]

Hi,

i have tested the blacklists in HTTP-Proxy Default and in the HTTP Profile filter - both with the same effect.

I think they don't work effective and can be bypassed very simple.

I have entered "www.heise.de" to the blacklist, and tried to access in my browser -> the site was blocked: OK.

Then i pinged www.heise.de with the result 193.99.144.85 and tried the URL http://193.99.144.85 -> the side was not blocked and that is not OK. This simple trick is well known.

And the reverse case has the same error.
blacklist-entry: 193.99.144.85
browser: http://193.99.144.85 -> blocked
browser: www.heise.de -> NOT BLOCKED

Sorry, but I think the ASG must be better in this standard situation.

To calm down: I tried a site blocked by categorie "nudity": www.playboy.de / 193.201.12.60. Both adresses were blocked!

regards Juergen

Parents

0 tom_01 over 17 years ago

This is a hard problem - in case of www.heise.de, using RDNS to block would work, but for most other sites it would not.

Also, the "trick" only works if the site is not using vhosts. Also, this is the case with www.heise.de but not with many others.

There is no way to get a reliable "web site name" for an IP address.

The categorization engine works differently of course.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 tom_01 over 17 years ago

This is a hard problem - in case of www.heise.de, using RDNS to block would work, but for most other sites it would not.

Also, the "trick" only works if the site is not using vhosts. Also, this is the case with www.heise.de but not with many others.

There is no way to get a reliable "web site name" for an IP address.

The categorization engine works differently of course.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data

[7.080] HTTP Proxy - blacklists not effective [NOTABUG]

Submitted a Tech Support Case lately from the Support Portal?