Re: Prohibiting the use of proxies they can run these on any port really, so it's hard to trap without blocking everything don't allow them outbound of any port, force them to use an internal proxy on port 8080 for their http connections, and make it do SSL tunneling. you shouldn't need ANY ports outbound open unless for special requirements of the user, such as SSH outbound, or FTP, etc. __________________ ///M |