今天試了一個ROUTER

馬後砲

馬後砲 發表於 2012-8-26 08:03
十分贊同！
單靠block port系做唔晒所有封閉，
有個proxy server會做得徹底的，

如果block左佢個8080 ？

豆腐男

回復 馬後砲 #20 的帖子

look like you also knowing in enterprise ICT line woh...行家
小弟自我"吹水"一番先, 专搞cisco, VMware 同Microsoft, 大陆叫呢种行业为"IT农民工"

nice to know you all

busbus

c hing, did you tried Websense or IP Guard. Those are good for me to monitor Chinese's staff, they are so "trouble" indeed.

馬後砲

豆腐男 發表於 2012-8-26 13:24
回復 馬後砲 #20 的帖子

look like you also knowing in enterprise ICT line woh...行家

其實我真系唔系咁識咋
不過一般PROXY用8080, 所以咁UP

豆腐男

回復 busbus #23 的帖子

agree, but 很大工程下
you need to blacklist the site, and then set the policy to filter http/https

忠心提示: if your working place install any web proxy cache engine or content filtering, it is able to see Every transaction you in and out, so don't log on to any critical site like online banking, if the network administrator good in skill then it is very easy to see your username/password from the log....  

busbus

豆腐男 發表於 2012-8-28 17:48
回復 busbus #23 的帖子

agree, but 很大工程下

totally agree for the advice

spam4896

soundsticks 發表於 2012-8-2 06:23
I prefer you flash you router to ddwrt if your router can support. It really good to using this firm ...

同意升级到dd －Wrt，用8mb 以上的Flash和32mb以上的内存。
加上USB，可以加上千种Optware

馬後砲

spam4896 發表於 2012-10-7 19:28
同意升级到dd －Wrt，用8mb 以上的Flash和32mb以上的内存。
加上USB，可以加上千种Optware ...

FLASH 我明,點解RAM都要多?

raylms

我直頭買國內一隻IAM (深X, or Xfor) , 佢真頭分到有咩application
上面有 order 叫 工作時間 唔可以上 其他 website
但係 食飯 收工後 可以開放 一半 bandwidth
都幾好用架, 仲緊要係 用外國 filtering 佢阻唔哂 國內d program . protocol
真係要用國內嘢 打國內先得

aloharicnsa

I agree - most of the enterprise company would block site through proxy access (subscribe to blacklist, etc.). You can also limit the bandwidth by IP Port (or in this case - any specific VLAN) from your switch or router. Therefore certain users have a bigger pip than others (for whatever reasons). In addition, you can also limited the access through GOP (assuming Windows domain environment).

One way to cheat - open an VPN tunnel and proxy to another site for Internet access - such as set up a secure proxy from home and access from there. You can also split the tunnel with XXX packet using this and YYY packets going there (just an example). It is do-able - but you need to know what you are doing...