<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
AFAIK,<br>
<br>
every proxy admin faced with excessively smart users who want to
bypass a proxy. If you think that this is not true in your case - it
means you not know yet. While you suffer prince Hamlet's ethical
dilemma - "To bump or not to bump - that is a serious matter", your
smart-ass users will shamelessly use every possible tools and
methods to step over you and wipe they feet on the your proxy.<br>
<br>
I am deeply sorry for you, but to solve this problem by means of a
Squid is not possible. It is necessary to take into account the
existence of Tor, VPN, URL shorteners, Google Translate (Yea, it
also uses for bypassing proxy!), SOCKS, http/https anonymizers etc.
This is not easy and not simple. This battle occurs every day.<br>
<br>
I deliberately do not mention really advanced techniques of hiding
one type of traffic inside the other and another hacker's tools. VPN
is a strong, but not the last tool to ignore the proxy server if it
does not exist at all. And you can be sure your users will not miss
them.<br>
<br>
And in the fight against shield and sword sword usually wins.<br>
<br>
Only a proxy in this issue is not worth little or nothing. Only
trained administrator with experienced network administrator and two
pairs bodied brain can more or less hinder the life of these
smart-ass users.<br>
<br>
This day-by-day battle is significant part of IT security, which is
not product, but process.<br>
<br>
Hard luck,<br>
Yuri<br>
<br>
29.04.16 22:07, Yuri Voinov пишет:<br>
<span style="white-space: pre;">><br>
> The another option is using advanced DPI with database. Like
China government uses.<br>
><br>
> Squid itself can't.<br>
><br>
> 29.04.16 16:33, Reet Vyas пишет:<br>
> > Hi,<br>
><br>
><br>
><br>
> > I have working trasparent squid , Some users are
using proxy<br>
> vpn in moziilla as addon and bypassing my squid, Please
tell me<br>
> how to block all hola.org <a class="moz-txt-link-rfc2396E" href="http://hola.org"><http://hola.org></a> vpn
and ulrta<br>
> surf, I have already blocked websites,but seems not
working.<br>
><br>
><br>
><br>
> > Please let me know how to block these vpn access.<br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
> > _______________________________________________<br>
><br>
> > squid-users mailing list<br>
><br>
> > <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
><br>
> > <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXI9qIAAoJENNXIZxhPexGISAH/ivV0JV6zUhN5C85GubgI3or
<br>
EZJgL706JL+Q6CasmYF/88gau/j7EwYW+mtJ9EzdMGVo5lGkQW3Y/y6SjAmCdtI3
<br>
J4eJMGIqi8mQRzfx55HGEv2cXHsYh3hxcBcBay4YHM9NFcXW/xMqsnwrkICULI6b
<br>
mu91LERDiH5iBn9cT1qquKoTV8rg5E1eb6ZATA8r6VYRoZutzHN5/v4eww1ogxmc
<br>
cE+DVzEcK5VJYFtfUHEyOCO785Xu1TSCctmmvzjrv2SpBQcgxJJ6pSrDrk+Qw614
<br>
g50IJz26t0zqlrC/Z+LU0SeAgW7iboPID5yA/3bxWLSnupex3W93lwlPSJu48Pg=
<br>
=V6pf
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>