Syafril Hermansyah said the following on 06/07/2010 03:37 PM +07:00:
> Tidak bagus cara itu, mestinya mirip dg koneksi YM/Skype saat
> awal/inisialisasi koneksi dia pasti akan search ke situs tertentu dan
> situs itulah yg diblock.

Yg buat ultrasurf itu pandai, dia pakai https yg sulit dimonitor

<http://kerio.dutaint.co.id/keriocontrol/7.0/adminguide/sect-contfilter-conditions.html>

13.1  Conditions for HTTP and FTP filtering

For HTTP and FTP content filtering, the following conditions must be met:

...
2.  Connections must not be encrypted. SSL encrypted traffic (HTTPS and
FTPS protocols) cannot be monitored. In this case you can block access
to certain servers using traffic rules (see chapter 7.3  Definition of
Custom Traffic Rules).
....
5. If the proxy server is used (see chapter 9.4  Proxy server), It is
also possible to filter HTTPS servers (e.g. https://secure.kerio.com/).
However, it is not possible to filter individual objects at these servers.

Jadi force semua internet browsing melalui http proxy dengan demikian
host yg dituju akan tampil di http log.

<http://kerio.dutaint.co.id/keriocontrol/7.0/adminguide/sect-proxy.html>

[x] Enable non-transparent proxy server

Set automatic proxy configuration script to...
[x] Kerio Control proxy server

di NAT rule dihapus saja http dan https service atau http/https request
di redirected ke KCF proxy.



-- 
syafril
-------
Syafril Hermansyah




--->[Kerio Control Firewall]<----
This is Kerio Control Firewall Indonesia user mailing list

Subscribe : <mailto: kcontrol-subscribe[at]kerio.dutaint.com>
Unsubscribe : <mailto: kcontrol-unsubscribe[at]kerio.dutaint.com>

Latest version : KCF 7.0.0


Kirim email ke