Tuesday, August 9, 2011

How to block UltraSurf in squid -Resolved


How to block UltraSurk in squid -Resolved
Ultrasoft is one among the proxy bypass software which cannot be blocked since the IP address of the server changed frequently and also it encrypts the traffic through the secured pipe.
I think the only way to block it in the squid is to block IP based browsing in the squid proxy
TO achieve this you should add the below lines in the squid.conf file

vi /etc/squid/squid.conf

add the below lines in the top of all access lists

acl ipacl url_regex http://[0-9]*\.[0-9]*\.[0-9]*\.[0-9]*
http_access deny ipacl
acl numeric_IPs url_regex ^[0-9]+.[0-9]+.[0-9]+.[0-9]+
http_access deny  numeric_IPs


after this Ultrasurf will not be able to connect to their server since it initiate IP based request for that