[AusNOG] Public Internet Access Policies

[Skeeve Stevens]

Mark,

We do not look at normal usage.  The only usage we see are the log files of
the violations / redirects in the web filtering which includes the URL they
tried to go to, the category/blacklist/etc violation or the reputation that
websense reported for non-categorised sites.

Example:

[25/Aug/2014:05:55:43 +1000] "GET /?JNI_URL=
lesbiansadult.com/&JNI_REASON=BY_PRE_DEFINED&JNI_CATEGORY=Enhanced_Sex&JNI_REPUTATION=VERY+SAFE&JNI_POLICY=POLICY_EWF_STANDARD&JNI_SRCIP=x.x.x.x&JNI_SRCPORT=23869&JNI_DSTIP=x.x.x.x&JNI_DSTPORT=80
HTTP/1.0" 200 1612 "http://truelesbiansex.com/" "Mozilla/5.0 (Windows NT
6.1; WOW64) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/22.0.1207.1
Safari/537.1"

Mark, don't try to make this out to be what it isn't.  We're just managing
networks according to the policies that the clients set and I (mostly)
agree with for these kinds of environments (free public wifi).

Logs like the above are used purely for reporting, awareness and legal
purposes.  There is no tie back to the user themselves unless we did a DHCP
IP<-->MAC mapping - which we only do with an warrant - and even then it
doesn't give a whole lot of useful information to the LEA's.


...Skeeve

*Skeeve Stevens - *eintellego Networks Pty Ltd
skeeve at eintellegonetworks.com ; www.eintellegonetworks.com

Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve

facebook.com/eintellegonetworks ;  <http://twitter.com/networkceoau>
linkedin.com/in/skeeve

twitter.com/theispguy ; blog: www.theispguy.com


The Experts Who The Experts Call
Juniper - Cisco - Cloud - Consulting - IPv4 Brokering

On 10 October 2014 09:03, Mark Newton <newton at atdot.dotat.org> wrote:

>
> On 10 Oct, 2014, at 7:34 am, Skeeve Stevens <
> skeeve+ausnog at eintellegonetworks.com> wrote:
>
> > How often do they look at porn... perhaps far more than you realise.
>
> I'm failing to understand why end users utilizing internet access for
> purposes chosen by end users is a problem.
>
> > When you see what they are trying to get to, you wish you really hadn't.
>
> Why are you even looking? It's internet access: The TIAA applies to public
> hotspots every bit as much as it applies to every other network operated by
> a carriage service provider. In what universe is users' activities online
> any of your business?  And even if it was, where do you get off being
> judgemental about it?
>
>
>   - mark
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20141010/3126de83/attachment.html>