D&C Lug - Home Page
Devon & Cornwall Linux Users' Group

[ Date Index ][ Thread Index ]
[ <= Previous by date / thread ] [ Next by date / thread => ]

Re: Malicious emails was Re: [LUG] OT: spam



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Neil Williams wrote:
> On Sunday 21 Sep 2003 6:43 pm, Mark Evans wrote:
>
>>This is transparent proxying, which affects all connections
>>to a specific port. Regardless of the program which is in
>>use. What I want is a method of affecting just MSIE. Such
>>that it can only access specific web pages, whilst other
>>web browsers will be unaffected. Unfortunatly squid does
>>not allow ACL's by user_agent or similar.
>
>
> Your problem is going to be reliably identifying IE (other than
chucking it a
> trojan and seeing if it bites). The user_agent string is easy to
customise,
> not just in IE (registry) but also in most other browsers (where
user_agent
> spoofing can get you into sites that try and exclude non-IE agents
> completely.)

Bets Mark knows as much as SWEN as regards disabling common registry
editting tools ;-) If he didn't last week he sure does this week.

Sure it is possible to bypass anything in software, but if it is just to
upgrade IE, the path of least resistance might be to upgrade.

Assuming user agent is fixed, how do you do the proxy? Apache mod_proxy
doesn't seem to offer it.

I can't help feeling it would be smarter to go with pushing all
Microsoft patches, but I'm guessing Mark can't configure everyones PC?
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/bifuGFXfHI9FVgYRApSkAJ9+ds3rUTggKcpgwa+ox+WphcV42ACfahNf
B50wweFwJOSXddhws6ghwWM=
=gxG3
-----END PGP SIGNATURE-----

--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.


Lynx friendly