Originally Posted by CingularDuality

Apo, can you tell us how it is determined whether or not a site is blocked? My work uses a different method of filtering sites, but they're probably similar, and I get the feeling that it's a combination of black listing and content filtering. For instance, YouTube gets past the content filtering, but is black listed, while thousands of pr0n sites aren't blacklisted, but are blocked by the content filtering. TG would pass the content filtering, so it just has to evade the black list, thus an alternate URL would work?

I guess you can't just rewrite the "URL rewrite rules" so that the alternate URLs are private and bypass your "rewrite rules". (Heh... That's an awkward sentence. Lemme add some quotation marks.)

I can't speak for all military commands or even all government agencies, but this is what I do know:

Most commands/agencies use web filtering appliances or applications to block questionable sites. The most common I've seen are SurfControl and the Secure Computing SmartFilter. These are loaded with the rule categories by default and the command selects which categories they want to block. As the vendors add new sites into each category, the filters download updates and apply the new rules.

In addition to that, DISA will send out notices that require blocking of various sites for various reasons. Either malware propagation, questionable content, or just uncategorized sites that they don't want people going to.

In many cases, commands will also filter out any site outside their enclave that are accessed directly via IP.

As far as TG goes, I do have an idea. I might be able to stand up another URL that uses a different set of rewrite rules yet points to the same server directory for the main site. If this works and the other set of rewrite rules don't get in the way, it will allow me to set up an alias under a different domain that will load the same content as the main TG site. I'm going to play with this a bit tonight.

Personally, I'm not going to use the aliased domain. Being in the INFOSEC group I would think I'm just asking for trouble if I were to utilize this as a method of bypassing the filters. But if it helps some people out and they want to use it, I've got no qualms with that.