Re: Anti-spyware at the Gateway

"Sebastian Gottschalk" <seppi@seppig.de> wrote in message
news:47lt05Fg14i2U1@news.dfncis.de...
> Somebody. wrote:
>
>> Ok, well you can tell the fellows we've caught doing this so far, that
>> they
>> weren't caught.
>
> Simple things, that are trivial to detect, are easily detected. Wow,
> what a realization.
>
> Anyway, you'll waste your CPU cycles on searching for trickier methods.
>
>> Are there others doing it? Perhaps. Will they get away with it forever?
>> Don't count on it.
>
> I do count on it, I would actually bet.
>
>> Just because *you* can't do it, doesn't mean it can't be done.
>
> Just because *you* claim to do it, doesn't mean it can be done even
> though it provably can't be done.

Well Sebastian, I will agree to disagree if you will. I don't think anybody
is benefiting from the debate any more.

I think in future I will refrain from discussing the methods I use to detect
that which is commonly considered undetectable. It bothers people too much.
I'll stick with advice on configuring and troubleshooting appliances, for
mainstream activities. If people believe it can't be done, I look all the
better when I do it for my clients.

So you're right, none of this works, tunneling is impossible to detect.

-Russ.
Received on Mon May 1 00:57:09 2006