This is a multi-part message in MIME format.

------_=_NextPart_001_01C6657A.769EEB29
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

We did a test as well and were still blocked. Simply add a "?" question
mark correct? We put www.ibm.com in the "uncategorized" category as a
test. Websense version we are using is 6.1

We block uncategorized and allow dynamic.

John=20

-----Original Message-----
From: Hubbard, Dan [mailto:dhubbard@websense.com]=20
Sent: Friday, April 21, 2006 1:12 PM
To: qex@bsdmail.org; bugtraq@securityfocus.com
Subject: RE: [BULK] - Websense Filter Bypass

All;

We have received this report and are investigating. Our preliminary
tests show that this only works when customers block the uncategorized
URL category and allow the dynamic content category.

If you do not block uncategorized you should not be affected.=20





-----Original Message-----
From: qex@bsdmail.org [mailto:qex@bsdmail.org]=20
Sent: Thursday, April 20, 2006 5:04 AM
To: bugtraq@securityfocus.com
Subject: [BULK] - Websense Filter Bypass

#!/usr/bin/perl -w
#
# Websense Filter Bypass
#
# =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3 D=3D=3D=3D
# Discovered by: Qex
# Date: 19 April 2006
# =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3 D=3D=3D=3D
#
# Bypass any website that is in the "Uncategorized" Websense Category #
simply by adding a question mark (?) at the end of the URL.

print q(
Websense Filter Bypass

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3 D=3D=3D=3D
Discovered by: Qex
Date: 19 April 2006
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3 D=3D=3D=3D
)

print "Enter URL:\n";

$url =3D <STDIN>;

chomp $url;

$bypass =3D "$url/?";


print "\nURL: \n$bypass\n";

------_=_NextPart_001_01C6657A.769EEB29
Content-Type: text/x-vcard;
name="John E. Fleming.vcf"
Content-Transfer-Encoding: base64
Content-Description: John E. Fleming.vcf
Content-Disposition: attachment;
filename="John E. Fleming.vcf"

QkVHSU46VkNBUkQNClZFUlNJT046Mi4xDQpOOkZsZW1pbmc7Sm 9obg0KRk46Sm9obiBFLiBGbGVt
aW5nDQpPUkc6UHJlbWl1bSBBc3NldCBSZWNvdmVyeSBDb3JwLi wgSW5jLjtJbmZvcm1hdGlvbiBT
eXN0ZW1zDQpUSVRMRTpEYXRhYmFzZSBNYW5hZ2VyL1Byb2dyYW 1tZXINClRFTDtXT1JLO1ZPSUNF
OjU2MS00NDctOTI3MSAgZXh0LjEwNzgNCkFEUjtXT1JLO0VOQ0 9ESU5HPVFVT1RFRC1QUklOVEFC
TEU6OzszNTAgSmltIE1vcmFuIEJsdmQ9MEQ9MEFTdWl0ZSAyMT A7RGVlcmZpZWxkIEJlYWNoO0ZM
OzMzNDQyO1VuaXRlZCBTdGF0ZXMNCkxBQkVMO1dPUks7RU5DT0 RJTkc9UVVPVEVELVBSSU5UQUJM
RTozNTAgSmltIE1vcmFuIEJsdmQ9MEQ9MEFTdWl0ZSAyMTA9ME Q9MEFEZWVyZmllbGQgQmVhY2gs
IEZMIDMzNDQyPTBEPTBBVW5pdGVkPQ0KIFN0YXRlcw0KRU1BSU w7UFJFRjtJTlRFUk5FVDpKb2hu
QHBhcmNhc3NldHMuY29tDQpSRVY6MjAwNjAzMjBUMTg1NTA4Wg 0KRU5EOlZDQVJEDQo=

------_=_NextPart_001_01C6657A.769EEB29--