Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Sat Mar 30, 2024 1:51 am

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 5 posts ] 
Author Message
 Post subject: Proxy Check
PostPosted: Fri Oct 10, 2008 2:31 am 
Offline
Newbie

Joined: Fri Oct 10, 2008 12:50 am
Posts: 3
As a security measure, and since a PC on the network has contracted a trojan that installs TinyProxy, I think it'd be good to see at a glance which PCs are using a Proxy for Internet Explorer, or whichever browser. This might also help catch staff who use proxys to bypass the logging on the server; going to dodgy sites etc.


Top
 Profile  
Reply with quote  
 Post subject: Re: Proxy Check
PostPosted: Fri Oct 10, 2008 10:21 pm 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
..... Or alternatively, might help me catch users who switch OFF the proxy, in order to avoid being detected trying to access hookey websites. :evil:

Sounds like a neat idea, how do we fetch the inof from WMI/registry?

EDIT: inof?! :? shurly shum mishtake, must be this keyboard :wink: should be info.

BTW Set up IPcop with Advanced Proxy, and URL filter addons, then set your outbound router to only accept http from the ipcop proxy (and perhaps your own workstation), will give you back complete control of the internet, 'nobody sees nuffin' without you knowing. Hehehehe... the feeling of power... etc. (http://www.ipcop.org/)

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
 Post subject: Re: Proxy Check
PostPosted: Sat Oct 11, 2008 3:06 am 
Offline
Newbie

Joined: Fri Oct 10, 2008 12:50 am
Posts: 3
I'm using a batch file to check
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings - ProxyServer
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings - ProxyEnable


Top
 Profile  
Reply with quote  
 Post subject: Re: Proxy Check
PostPosted: Tue Oct 14, 2008 11:39 am 
Offline
Site Admin
User avatar

Joined: Mon Jun 07, 2004 11:48 am
Posts: 1964
Location: Brisbane, Australia
Obviously this is a User dependent setting.
Do we have a section for each user, on each system for the Users Settings ?

_________________
Support and Development hours available from [url=https://opmantek.com]Opmantek[/url].
Please consider a purchase to help make Open-AudIT better for everyone.


Top
 Profile  
Reply with quote  
 Post subject: Re: Proxy Check
PostPosted: Tue Oct 14, 2008 6:41 pm 
Offline
Newbie

Joined: Fri Oct 10, 2008 12:50 am
Posts: 3
Our users don't hot seat, so at the moment, checking the proxy within the login script is good enough.
Primarily I'd be interested in the proxy for the logged in user running the audit (mine are run at logon after time delay).


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 5 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group