D&C Lug - Home Page
Devon & Cornwall Linux Users' Group

[ Date Index ][ Thread Index ]
[ <= Previous by date / thread ] [ Next by date / thread => ]

Re: Malicious emails was Re: [LUG] OT: spam



On Sunday 21 Sep 2003 6:43 pm, Mark Evans wrote:
> This is transparent proxying, which affects all connections
> to a specific port. Regardless of the program which is in
> use. What I want is a method of affecting just MSIE. Such
> that it can only access specific web pages, whilst other
> web browsers will be unaffected. Unfortunatly squid does
> not allow ACL's by user_agent or similar.

Your problem is going to be reliably identifying IE (other than chucking it a 
trojan and seeing if it bites). The user_agent string is easy to customise, 
not just in IE (registry) but also in most other browsers (where user_agent 
spoofing can get you into sites that try and exclude non-IE agents 
completely.)

Even if your write a bespoke ActiveX control (YUK!), there are no promises 
that all versions of IE will actually execute it properly/at all - IE can be 
set to ignore such controls.

It needs to be done within IE really. Even then, with the security of IE 
configurations, it's going to be impossible to prevent a seasoned Windows 
user from hacking the registry to get IE to look outside the preferences. 
After all, if you are going to allow Netscape or Opera on the same machine to 
access sites that are denied to IE, it stands to reason that there are going 
to be ways of breaking IE such that it looks like something else.

-- 

Neil Williams
=============
http://www.codehelp.co.uk
http://www.dclug.org.uk

http://www.biglumber.com/x/web?qs=0x8801094A28BCB3E3

Attachment: pgp00032.pgp
Description: signature


Lynx friendly