corsasport.co.uk
 

Corsa Sport » Message Board » Off Day » Geek Day » group policy to block proxy server use » Post Reply

Post Reply
Who Can Post? All users can post new topics and all users can reply.
Icon:
Formatting Mode:
Normal
Advanced
Help

Insert Bold text Insert Italicized text Insert Underlined text Insert Centered text Insert a Hyperlink Insert Email Hyperlink Insert an Image Insert Code Formatted text Insert Quoted text
Message:
HTML is Off
Smilies are On
BB Code is On
[img] Code is On
Post Options: Disable smileys?
Turn BBCode off?
Receive email notification of new replies?

Bart

posted on 3rd Mar 08 at 11:48

https://www.proxify.com is whats being used.

I think its because its https is why i cant block it. Any ideas?


Bart

posted on 29th Feb 08 at 08:01

Ive a feeling this is being used: http://www.wampserver.com/en/index.php


Bart

posted on 29th Feb 08 at 07:06

that im not sure of.Im just trying to see if i can log access on the draytek 2800.


MikeD

posted on 28th Feb 08 at 19:55

so he has installed software on his home machine for a proxy? whats the software? and what port is he going out on?


Aaron

posted on 28th Feb 08 at 18:50

Your call then mate, can't do much more for ya.


Bart

posted on 28th Feb 08 at 18:40

yes, but a little disheartening to the people to have go and install VNC on their machines :(


Aaron

posted on 28th Feb 08 at 18:27

VNC is a small open source desktop sharing application.

Google for Real VNC. Then install it on his computer. You'll need to instal the viewer (part of the main .exe which you'll download) to view his screen.

Easy


Bart

posted on 28th Feb 08 at 18:05

ive never tried using VNC before.
Is it part of Small business server or just windows 2003 full?


Aaron

posted on 28th Feb 08 at 17:14

can you not check his IE history or use VNC?


Bart

posted on 28th Feb 08 at 17:13

the trouble is he sat at his pc all the time. Theres no easy way for me to find this.


Aaron

posted on 28th Feb 08 at 17:09

Find out what DynamicDNS name he/she is putting in their browser in order for them to use it as a proxy.

Then, on your own internal DNS, create an entry to send all requests to that URL/IP address to something like http://drivingni.com/design/AccessDenied.jpg

I've done this before :)


Dan Lewis

posted on 28th Feb 08 at 17:07

i would go the disipline route tbh if there are things in place to stop it and users are bypassing and find other ways to get pass.


Bart

posted on 28th Feb 08 at 17:02

I have already done this, but a user has installed a proxy at home and is using this (its live from IE) and not remote desktop.
He is also using a fake IP to connect to his machine at home. Its not port 80.

I would have throught on sbs there must be a way to lock down everything on http except port 80?


jamesw

posted on 28th Feb 08 at 16:57

you can disable access to the connections tab in IE via GPO this is how we have done it, infact we have disabled access to most of the IE settings.


Bart

posted on 28th Feb 08 at 16:53

If I dont actually have a proxy (i.e servers connect to internet via the sbs server), theres nothing I can put in there to define a proxy server is there? If i put the servers ip address in there, every webpage will reroute to the servers address.


Dan Lewis

posted on 28th Feb 08 at 16:37

you can using gpo

define the proxy in the GPO then disable accses to the tools within ie


Bart

posted on 28th Feb 08 at 16:36

Is there a way I could block proxy server use from within an sbs 2003 environment?
Ive already configured the proxy server settings from within IE, but If I was to use proxy software I could access the internet fine.

I think i could do with blocking all HTTP access on all ports except 80.
I only use routing and remote access, no firewall.