Block the Proxy sites

nagamani

Dear Team,

I want to block the Proxy sites in our firewall.

Kindly send the procedure for blocking the proxy sites.

KOM

Kindly send the procedure for blocking the proxy sites.

1. Figure out all of the IP addresses for every proxy in the entire world that you want to block
2. Create an alias to hold all of those IP addresses
2. Add firewall rule on LAN to block access to that alias you created in #2

That's it. We can help you with steps 2 & 3. Step 1 – you're on your own. Try using Google to look for public web proxy servers.

firewalluser

Add the domain name to aliases, eg
www.myfreeproxy.com
rt1.myfreeproxy.com
rt2.myfreeproxy.com
vpn1.myfreeproxy.com
vpn2.myfreeproxy.com
etc etc and then put them on a block rule in the fw rules.

The hard work is establishing the subdomains and domains not associated with the example www.myfreeproxy.com as they might have a few other domains they use for the actual routing of proxy server traffic.

http://www.publicproxyservers.com/proxy/list1.html

At the very least establishing and blocking the entrance point and/or ports will be a nuisance but as the Alias function in pfsense doesnt translate down to subdomains, you will need to specify all permutations yourself.

doktornotor

pfBlockerNG has a proxy blocklist (based on MaxMind data).