Tobias Goeller wrote:
Hi Jerome,
Jeroen Massar wrote:
You are blocking port 80? Wow.
Yes, partly. I force those users to use a proxy-system... works quite well.
How exactly does that help anything? Users will then simply run the same protocols over your proxy, or DNS or whatever method they can find their way out.
It will only make it a hassle for them to configure all the time, and for you there is no gain as you won't be able to tell more or less about the actual usage as people suddenly start VPN'ing and tunneling all over the place.
Though this might 'help' (ahum) for worms and other such malicious tools which don't understand that they can pick the configuration items for the proxy from IE or Firefox configuration, it won't help a thing for anything else.
Greets, Jeroen