Jeroen Massar jeroen@unfix.org 2007-12-12:
Tobias Goeller wrote:
Jeroen Massar wrote:
You are blocking port 80? Wow.
Yes, partly. I force those users to use a proxy-system... works quite well.
How exactly does that help anything? [...] Though this might 'help' (ahum) for worms and other such malicious tools which don't understand that they can pick the configuration items for the proxy from IE or Firefox configuration, it won't help a thing for anything else.
By enforcing a proxy, you have the option of content filtering, either by MIME type or by running files through an AV scanner. It does not solve all problems, but can solve some of them. (At a cost, of course.)
-Dan