Re: [squid-users] Issues with Base 10 Decimal Bypassing Squidguard

From: <dhottinger@dont-contact.us>
Date: Tue, 11 Dec 2007 07:52:58 -0500

Quoting nathan.harris@yhfsc.org.uk:

> Hi there,
>
> Here's an interesting one for you guys, I work P/T at a Local Authority
> ISP service based upon open source code.
>
> The kids Have recently realised that is you take
>
> www.playboy.com
>
> convert it to it's IP 216.163.137.3
>
> covert it to Binary
>
> 11011000 10100011 10001001 00000011
>
> then back into base 10 decimal
>
> 3634596099 now you enter this into your browser http://3634596099
>
> at first I was unsure if this was an april fools
>
> but sure enough it works and bypasses the filtering completly. Not many
> sites work but I did find one or two more.
>
> Both url blocking in squidguard & IP filtering does not effect base 10
>
> Has anyone any idea how we can get squid to ignore Base 10 & Hex web
> requests? kids will be bypassing filtering platforms up and down the UK
> (or more probably have been for some time)
>
> credit to them, clever little blighters
>

Crud. Yea, they are clever. We train them from kindergarden till
they graduate. 12 years of computer, then we wonder how they are able
to defeat every filter we put in place. Plus there are 4000+ them and
only one of us at each school division. Do you know offhand what
sites work?

-- 
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools
"rarely do people communicate, they just take turns talking"
Received on Tue Dec 11 2007 - 05:53:01 MST

This archive was generated by hypermail pre-2.1.9 : Tue Jan 01 2008 - 12:00:01 MST