URL Spoofing

Networking/Security Forums -> Firewalls // Intrusion Detection - External Security

Author: fauzzi PostPosted: Thu May 06, 2010 11:47 am    Post subject: URL Spoofing
    ----
Hi Gents,

Currently I am fighting with some websites eg:-kproxy,rocketopen.info ,which are used to bypass the proxy/firewall without even getting logged in any log monitoring device to access the blocked websites or you can call it as URL spoofing.

If I ll search on google for the list of those websites then there is lot and updates regularly.

So searching and blocking those URL on daily basis is not a good idea, so any has one faced this kind of issue in there organisation and if any one of you has implemented any kind os solution for blocking such websites on proxy/firewall/IPS or through any device then please let me know.

All suggestion will be appreciated.

Regards,

Fauzzi

Author: operat0r2 PostPosted: Thu May 06, 2010 4:56 pm    Post subject:
    ----
setup a squid proxy with dansguardian and for extra points add snort with emerging threats and make custom sigs for detect and blocking ssh tunnels etc

http://www.google.com/search?q=squid+"blocking+proxies"

Author: abrahamj PostPosted: Mon Sep 20, 2010 10:45 am    Post subject:
    ----
You try the Ax3soft Sax2,visit http://www.Ids-sax2.com and download sax2 to help you.



Networking/Security Forums -> Firewalls // Intrusion Detection - External Security


output generated using printer-friendly topic mod, All times are GMT + 2 Hours

Page 1 of 1

Powered by phpBB 2.0.x © 2001 phpBB Group