Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » How To Block Ultrasurf? (How To Block Ultrasurf?)
  •  
Gagik

Messages: 43
Karma: -1
Send a private message to this user
Ultrasurf has become the most popular tool that's been checked for in IdentiFile. Ultrasurf is a freeware Internet censorship circumvention tool that enables its users to bypass censorship and firewalls using HTTP proxy. It's been around for several years already and has become very popular among students, since it allows them to trick web filters and browse their favourite websites on school machines.

How can I Block Ultrasurf in Kerio Control?

[Updated on: Thu, 11 April 2013 07:49]

  •  
Jonas Rodrigues (Kerio)

Messages: 262
Karma: 22
Send a private message to this user
Hi Gagik,

Unfortunately it is not possible to block UltraSurf easily as it is encrypted. SIJOVPN, PaperBus, Freegate, Ultrasurf

etc. are using multiple open proxies and they are fully encrypted. So the only solution is to find out what proxy

servers (destination servers) are used by this application and block them by traffic rule.


You can also list it as a feature request to be included in upcoming versions of Kerio Control.

If you login to the WebAdmin there is a button at the top of the page called 'Suggest Idea' if you use that you can

list the suggestion for these features.



Kerio Technical Support
Log Support Incidents here: http://www.kerio.com/support
Also, please use our KB: http://kb.kerio.com
  •  
ICT and Me

Messages: 936

Karma: 53
Send a private message to this user
Ultraserver blocking can be done with following ip range blocking
65.49.14.50-65.49.15.100
This is a range what I know. And it blocks.

ICT and Me
Carlo Turk
The Netherlands
www.ictandme.nl
  •  
Gagik

Messages: 43
Karma: -1
Send a private message to this user
I block 65.49.0.0/255.255.128.0 and 204.107.140.0/255.255.255.0, but it works only with 12 and older versions, with 12.07 and newest version it not works
  •  
Lisa Lyons (Kerio)

Messages: 175
Karma: 8
Send a private message to this user
This indicates that Ultrasurf have added additional IP Addresses to their range. This is one of the biggest problems in attempting to block them, as they modify their range quite frequently, causing some older versions to be blocked, but newer versions not.

The best thing I can recommend is installing the newest version, then use a debug command to look for connections from your own Internal IP, to the outside world. This should help you identify the new Ultrasurf range they are using.

http://kb.kerio.com/product/kerio-control/server-configurati on-kerio-control/using-logs-ip-traffic-in-debug-log-1374.htm l

http://kb.kerio.com/product/kerio-control/firewall-packet-fi ltering/how-to-change-the-format-of-logged-packets-in-the-de bug-and-filter-logs-584.html

Kerio Technical Support
Log Support Incidents here: http://www.kerio.com/support
Also, please use our KB: http://kb.kerio.com
Previous Topic: Sophos verdict: Out of disk space
Next Topic: FTP Problem
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Aug 18 06:58:54 CEST 2017

Total time taken to generate the page: 0.00424 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.