[squid-users] Block VPN access like hola.org ,ultrasurf

2016-04-29 Thread Reet Vyas
Hi, I have working trasparent squid , Some users are using proxy vpn in moziilla as addon and bypassing my squid, Please tell me how to block all hola.org vpn and ulrta surf, I have already blocked websites,but seems not working. Please let me know how to block these vpn access. _

Re: [squid-users] Block VPN access like hola.org ,ultrasurf

2016-04-29 Thread Yuri Voinov
Not with squid, man. Only on Cisco/another router by IP. ip access-list extended TO_INET remark Hamachi deny ip 25.0.0.0 0.255.255.255 any deny ip 64.34.106.0 0.0.0.255 any deny ip any host 69.25.21.195 deny ip any host 74.201.75.195 deny ip any host 146.255.195.92 remark ZenMat

Re: [squid-users] Block VPN access like hola.org ,ultrasurf

2016-04-29 Thread Yuri Voinov
Not with squid, man. Only on Cisco/another router by IP. ip access-list extended TO_INET remark Hamachi deny ip 25.0.0.0 0.255.255.255 any deny ip 64.34.106.0 0.0.0.255 any deny ip any host 69.25.21.195 deny ip any host 74.201.75.195 deny ip any host 146.255.195.92 remark ZenMat

Re: [squid-users] Block VPN access like hola.org ,ultrasurf

2016-04-29 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 The another option is using advanced DPI with database. Like China government uses. Squid itself can't. 29.04.16 16:33, Reet Vyas пишет: > Hi, > > I have working trasparent squid , Some users are using proxy vpn in moziilla as addon and bypassing

Re: [squid-users] Block VPN access like hola.org ,ultrasurf

2016-04-29 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 AFAIK, every proxy admin faced with excessively smart users who want to bypass a proxy. If you think that this is not true in your case - it means you not know yet. While you suffer prince Hamlet's ethical dilemma - "To bump or not to bump - that

Re: [squid-users] Block VPN access like hola.org ,ultrasurf

2016-05-01 Thread Reet Vyas
Thanks so much for detailed explanation, will try cisco thing and will check if it gets working On Sat, Apr 30, 2016 at 3:34 AM, Yuri Voinov wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > AFAIK, > > every proxy admin faced with excessively smart users who want to bypass a > pro