This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Ultrasurf 10.01

Hi,

Can someone help me because Ultrasurf released a new version 10.01 and it can easily bypass astaro. I have configured the Operation Mode to Transparent and checked the Scan SSL traffic.

This thread was automatically locked due to age.

0 profesor over 15 years ago

check "Anonymizers" and "Anonymizing Utilities
Cancel
Vote Up 0 Vote Down

Cancel
0 franklin.gonzales over 15 years ago in reply to profesor

check "Anonymizers" and "Anonymizing Utilities

its already checked in the url filtering categories. I have tested all scenarios and even tried to set block by default.
Cancel
Vote Up 0 Vote Down

Cancel
0 profesor over 15 years ago in reply to franklin.gonzales

block url
https://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/

and check PF
Cancel
Vote Up 0 Vote Down

Cancel
0 franklin.gonzales over 15 years ago in reply to profesor

check "Anonymizers" and "Anonymizing Utilities

block url
https://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/

and check PF

added https://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/ to the Additional URLs/sites to block
but stil Ultrasurf 10.01 connected successfully. BTW what will i check in the PF?
Cancel
Vote Up 0 Vote Down

Cancel
0 profesor over 15 years ago in reply to franklin.gonzales

transparent proxy mode;

diasble pf rule for internal network-web surf protocol-any
and
transparent proxy handle web surfing (80, 443etc)
Cancel
Vote Up 0 Vote Down

Cancel
0 profesor over 15 years ago in reply to profesor

... and ad web block url:
http://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/
https://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/
Cancel
Vote Up 0 Vote Down

Cancel
0 franklin.gonzales over 15 years ago in reply to profesor

... and ad web block url:
http://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/
https://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/

thanks prof! it works [:D]
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 15 years ago

http://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/
+
https://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/
=
https?://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 14 years ago

Hi,

Can someone help me because Ultrasurf released a new version 10.01 and it can easily bypass astaro. I have configured the Operation Mode to Transparent and checked the Scan SSL traffic.

make sure you don't have https allowed on the pf or you'll go right by the http proxy as well.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel