Great Circle Associates Firewalls
(October 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Firewalls vs Blocking Sites
From: Joe Judge <joej @ joesmac . ultranet . com>
Organization: Whatever ...
Date: Mon, 28 Oct 1996 22:23:08 -0500
To: dckinder @ ahcbsd1 . ovnet . com
Cc: Bert Carroll <bc17684 @ 90 . deere . com>, Firewalls @ GreatCircle . COM
References: <199610282000 . PAA28586 @ ahcbsd1 . ovnet . com>

There are "anonymizers" and there are "proxy" sites out
	there. They will take a connection, go get the pages
	that you *really* want, rewrite the URLs to come back
	through them (so it works) ...and voila!

	As soon as you start down that path (content filtering)
	you are in for the biggest job of your life.

	Build an internal caching proxy server, only let that
	through your firewall (chained proxies) ... and hand
	over the management of that filtering (internal) server
	to the group that wants to play censor.

	We did that ... hey, its not my company -- their choice.
	It is an inconsistent security policy, though. You know
	... they dont check my briefcase as I wander in and out
	and we have modems on our desktops. Why this filtering
	would drive a sex addict to connect to porno BBSes and
	sneak in PlayGeek magazines into the workplace ... 
	better yet, I can ... or I can ...

	We hire good problem solvers (that is why we like them)
	and you know what? We've just set up a problem for them
	to solve and left a lot of tools sitting around with
	which to solve it!

	I'm sorry ... I guess the managers don't have time to
	manage their employees (who are wasting time hitting 
	porno sites) ... we'll have the firewall do it.

	And -- (last part of the rant :) -- having someone 
	check the top offenders and make the phone call 
	asking them to respect the company resources every
	now and again will clean up 80% of the problem (like
	a previous message suggested). Just tell them you
	noticed it while collecting billing data :)

		- joe (ranting a lot these days) judge


	
dckinder @
 ahcbsd1 .
 ovnet .
 com wrote:
> 
> I saw an aticle recently about how someone has sent up an end-around
> whereby essentially you request a site: e.g.  www.playboy.com, and
> they email you with the html for the page attached.
> 
> You would want to think about this.
> 
> Duncan Kinder
>


References:
Indexed By Date Previous: Re: The BEST Firewall
From: Joe Judge <joej @ joesmac . ultranet . com>
Next: Microsoft's catapult
From: "Lieblich, Sam @ MELPO1" <SLieblic @ mits . com . au>
Indexed By Thread Previous: Re: Firewalls vs Blocking Sites
From: Ron DuFresne <dufresne @ parka . winternet . com>
Next: Firewalls vs Blocking Sites
From: Gerald_Preteau @ cargill . com

Google
 
Search Internet Search www.greatcircle.com