[LUG.ro] Lidiar con dial up

Gustavo Guillermo Perez lugro@lugro.org.ar
Fri, 7 Jan 2005 19:16:16 +0600


El Miércoles 05 Enero 2005 23:57, Fernando Gonzalez escribió:
> Una cosa q me pasa con el puto xp como cliente de una red, es la
> vulnerabilidad del IE, que permite instalar cualquier cosa, sobre todo
> programas que esta denle tx todo el tiempo, y lógicamente usando ancho de
> banda, fijate en las propiedades de las placas de red, tienen un tilde para
> poner un icono a lado del reloj, y fijate si tx-rx, sin ningun programa
> abierto, si es asi, ahí tenes el problemas son los sypware.
>
Exacto, desinstalo el IE y meto Mozilla/MFirefox, pero no se como vuelve a 
aparecer, yo se que no se borra, porque MI PC es Explorer, pero..... En el 
server Linux, hay squid con soporte para proxy transparente, por lo que puedo 
bloquear .exe, .cab, .vbs, .ocx, etc etc, así que por lo menos por http no 
entran.
en squid:
acl LOCKP0 url_regex -i ^http://[a-z*,.,0-9]*rotten\.com.* 
acl LOCKP1 url_regex -i ^http://[a-z*,.,0-9]*fiestaguay\.com.* 
acl LOCKP2 url_regex -i ^http://[a-z*,.,0-9]*cometcursor\.com.* 
acl LOCKP3 url_regex -i ^http://[a-z*,.,0-9]*fassia\.net.* 
acl LOCKP4 url_regex -i ^http://[a-z*,.,0-9]*auto\.search.msn.com.* 
acl LOCKP5 url_regex -i ^http://[a-z*,.,0-9]*gator\.com.* 
acl LOCKP6 url_regex -i ^http://[a-z*,.,0-9]*doubleclick\.net.* 
acl LOCKP7 url_regex -i ^http://[a-z*,.,0-9]*kazaa\.com.* 
acl LOCKP8 url_regex -i ^http://[a-z*,.,0-9]*feedbackresearch\.com.* 
acl LOCKP9 url_regex -i ^http://[a-z*,.,0-9]*216\.130.216.225.* 
acl LOCKP10 url_regex -i ^http://[a-z*,.,0-9]*195\.219.113.67.* 
acl LOCKP11 url_regex -i ^http://[a-z*,.,0-9]*wildtangent\.com.* 
acl LOCKP12 url_regex -i ^http://[a-z*,.,0-9]*media\.fastclick.net.* 
acl LOCKP13 url_regex -i ^http://[a-z*,.,0-9]*cometsystems\.com.* 
acl LOCKP14 url_regex -i ^http://[a-z*,.,0-9]*znext\.com.* 
acl LOCKP15 url_regex -i ^http://[a-z*,.,0-9]*tjgo\.com.* 
acl LOCKP16 url_regex -i ^http://[a-z*,.,0-9]*bidclix\.net.* 
acl LOCKP17 url_regex -i ^http://[a-z*,.,0-9]*presision-time\.com.* 
acl LOCKP18 url_regex -i ^http://[a-z*,.,0-9]*gatoradver\.com.* 
acl LOCKP19 url_regex -i ^http://[a-z*,.,0-9]*internetwasher\.com.* 
acl LOCKP20 url_regex -i ^http://[a-z*,.,0-9]*horoscoposs\.com.* 
acl LOCKP21 url_regex -i ^http://[a-z*,.,0-9]*granjazoo\.com.* 
acl LOCKP22 url_regex -i ^http://[a-z*,.,0-9]*perfectnav\.com.* 
acl LOCKP23 url_regex -i ^http://[a-z*,.,0-9]*sckr\.com.* 
acl LOCKP24 url_regex -i ^http://[a-z*,.,0-9]*date-manager\.com.* 
acl LOCKP25 url_regex -i ^http://[a-z*,.,0-9]*systemsoap\.com.* 
acl LOCKP26 url_regex -i ^http://[a-z*,.,0-9]*myway\.com.* 
acl LOCKE0 url_regex -i ^.*\.cab$ 
acl LOCKE1 url_regex -i ^.*\.bve$ 
acl LOCKE2 url_regex -i ^.*\.ocx$ 
acl LOCKE3 url_regex -i ^.*\.bat$ 
acl LOCKE4 url_regex -i ^.*\.bvs$ 
acl LOCKE5 url_regex -i ^.*\.bv$ 
acl LOCKE6 url_regex -i ^.*\.exe$ 
acl LOCKE7 url_regex -i ^.*\.pif$ 
acl LOCKE8 url_regex -i ^.*\.ins$

Y sus respectivos DENY

http_access deny LOCKP0 
http_access deny LOCKP1 
http_access deny LOCKP2 
http_access deny LOCKP3 
http_access deny LOCKP4 
http_access deny LOCKP5 
http_access deny LOCKP6 
http_access deny LOCKP7 
http_access deny LOCKP8 
http_access deny LOCKP9 
http_access deny LOCKP10 
http_access deny LOCKP11 
http_access deny LOCKP12 
http_access deny LOCKP13 
http_access deny LOCKP14 
http_access deny LOCKP15 
http_access deny LOCKP16 
http_access deny LOCKP17 
http_access deny LOCKP18 
http_access deny LOCKP19 
http_access deny LOCKP20 
http_access deny LOCKP21 
http_access deny LOCKP22 
http_access deny LOCKP23 
http_access deny LOCKP24 
http_access deny LOCKP25 
http_access deny LOCKP26 
http_access deny LOCKE0 
http_access deny LOCKE1 
http_access deny LOCKE2 
http_access deny LOCKE3 
http_access deny LOCKE4 
http_access deny LOCKE5 
http_access deny LOCKE6 
http_access deny LOCKE7 
http_access deny LOCKE8 

Saludos
-- 
-------
Gustavo Guillermo Perez
Compunauta uLinux
www.userver.tk