Hi, ultrasurf doesn't use SSL but Wireshark vs recognized it is a SSL. I run Ultrasurf over proxy(Squid) and watch access.log, it just connects to Ip addresses not host addresses. Thus i wrote a access list to Squid which'is blocking SSL requests(via CONNECT) to non domain addresses.
There's 1 year old but informative article here -> http://www.m86security.com/kb/attachments/Ultrasurf-GUID78cf6064c4d04affa2e177bc01284be4.pdf --- Huzeyfe ONAL Ag Guvenligi Listesine uye oldunuz mu? http://www.lifeoverip.net/netsec-listesi/ --- On Mon, Oct 26, 2009 at 9:38 PM, Adrian Crenshaw <[email protected]>wrote: > As many of you know, I've been researching darknets. While not quite the > same thing, I've been looking at http://www.ultrareach.com/ which I found > via a Slashdot story. This is the first I've seen of it, but I'm having > problems finding tech info on it. Anyone work with it? I've thrown a sniffer > on it, and it seems the out tunnel is on 443 and may be using SSL (hard to > say, the could be rolling their own encryption and just using the 443/tcp > port). Anyone know more about the group putting this out? > > Thanks, > Adrian > > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com >
_______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
