Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

How to Block UltraSurf?

93 views
Skip to first unread message

FB

unread,
Jul 17, 2008, 9:50:01 AM7/17/08
to
I found an App called UltraSurf. The App listens on port TCP:9666 on
127.0.0.1 and XP Firewall does not block the software. UltraSurf starts a
"proxy" and bypass proxies opening TCP/443 conenctions with proxies arround
the world (mid-east and Asia)

In Vista the native firewal blocks the software.

How can i block the software? Using SRP is not enough because there are
various versions and the software auto-updates and changes the hash and there
is a "portable" version, so, the Path Rule cannot be used too.

Wich client-solution i need to block the UltraSurf from bypassing my proxy
(Linux)?

The IPs i found, of open proxies used by UltraSurf


99.224.0.0/11
63.241.6.64/28
63.242.0.0/16
63.240.0.0/15
218.168.0.0/16
125.176.0.0/12
122.118.0.0/16
69.64.144.0/20
211.109.128.0/24
59.120.0.0/14
59.112.0.0/13
97.112.0.0/13
71.192.0.0/12
219.137.112.224/27
203.112.80.0/20
162.138.0.0/16
170.201.0.0/16
156.40.0.0/16
61.224.0.0/14
61.220.0.0/14
59.120.0.0/14
59.112.0.0/13
220.136.0.0/13
220.132.0.0/14
220.130.0.0/15
220.129.0.0/16
118.168.0.0/16
122.120.0.0/13
118.168.0.0/16
122.120.0.0/13
71.208.0.0/12
61.231.0.0/16
218.160.0.0/16
61.62.74.0/24
72.25.64.0/18
66.245.192.0/18
64.62.138.0/25
64.62.128.0/17
125.224.0.0/13


Anteaus

unread,
Jul 20, 2008, 4:49:01 PM7/20/08
to
The issue here is that the inbuilt firewall only blocks inbound connections
from nonlocal hosts. It provides no outbound or localhost blocking. To block
this you need a full-featured firewall such as ZoneAlarm, Kerio, etc.

Either that, or map this port outbound to a dummy IP address (or just
firewall it, if the facility exists) at your internet router. (I assume
you're using one?) This is always a better approach as it sets a policy for
all your computers in one place.

0 new messages