Blocking Proxy Web Sites that Bypass Filters

Novell Cool Solutions: Tip
By David Pickett

Digg This - Slashdot This Posted: 20 Jun 2007

Problem

I am hoping to consolidate ideas or solutions to the everg-rowing website proxy sites that bypass filters. I have been monitoring and inputing new rules and these sites come up.

Solution

I find using the proxy cache monitor NWAdmin very effective on finding the commonly used sites and I also use BRDstats to create the HTML statistics logs of every 10MB log file I have. We currently do not use a 3rd party content filter, so therefore it's very hard to keep up the paces with these new sites that come up. I noticed that many of the sites are now providing automatic email of new proxy sites to help keep ahead of the filters.

I have found the following list for blocking search terms:

http://*/*q=*proxy* 
http://*/*b=*proxy* 
http://*/*q=*bypass* 
http://*/*b=*bypass* 
http://*/*q=*myspace* 
http://*/*b=*myspace* 
http://*/*q=*game* 
http://*/*b=*game* 
http://www.dogpile.com/info.dogpl/search/web/*myspace* 
http://www.dogpile.com/info.dogpl/search/web/*proxy* 
http://www.dogpile.com/info.dogpl/search/web/*game* 
http://www.dogpile.com/info.dogpl/search/web/*unblock*

I have also used port access rules to deny access to domains. Here's my list of domains to block ...

Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com