Re: [FW1] problem to block cyberdildonics sex sites?

[Olaf Selke <Olaf.Selke@mediaWays.net>]

According to Karen Alvarez:
> we have a problem to find the proper port to block this application:
> http://www.safesexplus.com/pages/SSP_Converter.html

You could ask CP to include the SafeSexPlus protocol into their
predefined services.

Since the filtering is done by the inspect engine, you could write
your own inspect code controlling the SSP protocol in detail.
I think this could be a very interesting task. If the SSP protocol is once
understood, one could filter on SSP application level which SSP controls
will permitted:

"The SSP Adapter can control one Sex Toy at a time, including
sextoys with multiple controls (such as vibrators that "spin")."

Maybe the service should be restricted to certain toys, depending on
the user position in management hierarchy. I can imagine this will 
be combined with NAT in hide mode.

please forgive me, but I couldn't resist ;-)

Olaf
-- 
Olaf Selke, olaf.selke@mediaways.net, voice +49 5241 80-7069


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================