Great Circle Associates Firewalls
(March 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Does Raptor WebNOT Block Legitimate Sites?
From: Allen Rogers <arogers @ raptor . com>
Date: Wed, 12 Mar 1997 09:19:05 -0500 (EST)
To: "2LT Jeffery J. Lowder, 333-4615" <LowderJJ . SCB . USAFA @ usafa . af . mil>, <bpetrie @ incc . net>, <raptor-list @ udc . com>, <firewalls @ greatcircle . com>

Jeffery,

In my last response I neglected to address the more general issue of
reporting bugs when you don't have a maintenance contract. Any time that you
come across a problem that you think might be a bug, please report this by
sending mail to bugs @
 raptor .
 com .
  This will allow us to more effectively
route this to the appropriate people for verification and fixes.

Best regards,
Allen Rogers


>Date: Tue, 11 Mar 1997 08:21:10 -0500 (EST)
>X-Sender: arogers @
 raptor1 .
 raptor .
 com (Unverified)
>To: "2LT Jeffery J. Lowder, 333-4615" <LowderJJ .
 SCB .
 USAFA @
 usafa .
 af .
 mil>,
>        <bpetrie @
 incc .
 net>, <raptor-list @
 udc .
 com>, <firewalls @
 greatcircle .
 com>
>From: Allen Rogers <arogers @
 raptor .
 com>
>Subject: Re: Does Raptor WebNOT Block Legitimate Sites?
>
>
>This is a list that Raptor licenses directly from Microsystems. The actual
>URLs used, and their abbreviated nature, is due to how Microsystems chooses
>to create their list. I am trying to open a formal path where our customers
>can present queries/requests to them directly for particular sites. I will
>keep you posted.
>
>-Allen
>
>At 09:29 AM 3/10/97 MST, 2LT Jeffery J. Lowder, 333-4615 wrote:
>>Hello,
>>
>>We recently installed Raptor WebNOT to work with our Raptor Eagle 4.0 
>>firewall.  Remember that WebNOT can be used to block access to 
>>'unauthorized' sites, where 'unauthorized' is defined as sites the company 
>>doesn't want its employees visiting.
>>
>>Apparently their database of 'bad' URLs contains many truncated URLs.  If 
>>the URL is just an IP address, everything works great.  However, if the 
>>URL is more than an IP address -- if the URL contains a directory path, a 
>>filename, or both -- we've found that the URL is normally truncated when 
>>listed in the WebNOT database.  For example, the URL for DejaNews Research 
>>Service,
>>
>>http://199.86.32.6/members/stick/ 
>>
>>is stored in the WebNOT database (httprating.db) as
>>
>>http://199.86.32.6/mem
>>
>>Now, I don't claim to have detailed knowledge of the computer at 
>>199.86.32.6, but it stands to reason that there are probably multiple 
>>subdirectories under the /members directory.  Yet Raptor WebNOT blocks 
>>access to ALL of these directories because apparently ONE of them contains 
>>nudity.
>>
>>
>>You can imagine how much I enjoy taking heat from customers because we're 
>>blocking access to ostensibly legitimate sites.
>>
>>Am I not understanding something, or is this very poor design on Raptor's 
>>part?  Is there anyone else out there who uses Raptor WebNOT and has 
>>experienced this problem?
>>
>>I tried calling Raptor directly to make a bug report, but since I don't 
>>have a maintenance contract with Raptor, the operator at Raptor customer 
>>support wouldn't even take my call.
>>
>>Lt Jeff Lowder <lowderjj .
 scb @
 usafa .
 af .
 mil>
>>Chief, Network Security
>>United States Air Force Academy
>>
>>Disclaimer: The above content does not necessarily represent the views of 
>>the United States Government or the United States Air Force Academy.
>>
>>
>+-----------------------------------------------------------------------+
>Allen Rogers                      | Raptor Systems Customer Support
>arogers @
 raptor .
 com                | http://www.raptor.com/cs/
>(617)487-7700 x128                | (888)-RAPTOR1   (617) 890-6532 (FAX)
>+-----------------------------------------------------------------------+
>
>
>
+-----------------------------------------------------------------------+
Allen Rogers                      | Raptor Systems Customer Support
arogers @
 raptor .
 com                | http://www.raptor.com/cs/
(617)487-7700 x128                | (888)-RAPTOR1   (617) 890-6532 (FAX)
+-----------------------------------------------------------------------+


Indexed By Date Previous: Re: Attack Tools for PIX or other firewall
From: "Eddie Powell" <epowell @ riscman . com>
Next: Known Holes in Microsoft Internet Exchange 1.04b
From: Mark Teicher <mteicher @ bbnplanet . com>
Indexed By Thread Previous: Re: Does Raptor WebNOT Block Legitimate Sites?
From: Allen Rogers <arogers @ raptor . com>
Next: (no subject)
From: "Marcus R. Williams, Jr." <security @ tomco . net>

Google
 
Search Internet Search www.greatcircle.com