Web filter a runaway success: Exetel

Easy bypasses bitter-sweet for government

Internet content filtering could cost users about $6 a year and cause no network disruption, according to results from a trial of the technology by ISP Exetel.

The filters performed flawlessly during the six-day trial, which ran separate to the government's filter pilot and concluded today. It recorded no false positives from some 20,000 hits against a blacklist of alleged child porn Web sites, and had “no measureable impact on any Exetel router”.

Exetel managing director John Linton said the 20,000 hits are bitter-sweet for the federal government, assuming each is considered an attempt to access an IP range connected to child porn Web site, because the filters could still be negated by anyone "mildly technically competent".

"This trial also demonstrated why a child pornography filter is necessary; if you consider that Exetel has only around 1 percent of Internet users in Australia then you might be more than a little surprised at how many paedophiles that implies there are," Linton said on his blog

"Trials will not stop the mildly technically competent internet users availing themselves of the myriad of tools to use some form of remote proxy to access any list of blocked sites.

"Basically [the federal government] will have to decide on shelving blacklisting child pornography or they have to scrap their ACMA list and find a substitute that is acceptable to the senate and the wavering Labor voters before the next election," he said. "They no longer have the cop out of 'it won't work technically'".

Exetel launched the mandatory filtering trial last week to assess first hand the performance and financial impact of applying content filtering to its network. It used the WatchDog International Web filter, which is featured on the government-prescribed list, and used its blacklist which the ISP says is similar to that used by the UK's Internet Watch Foundation.

Network engineer Steve Waddington said in the ISP's forums the trial was run irrespective of the views of its subscribers or management.

“Yes, yes, I know content filtering is a travesty of our rights (...to watch porn), thought control by fascist regimes, a return to the dark ages, etc. And, as I have argued elsewhere, not something I agree with - it being inappropriate, in my opinion, to use technology as both scapegoat and cure for a social problem,” Waddington said in an Exetel blog

“Nevertheless, should ... Rudd mandate it, we, the people who will have to put it in place at Exetel, need to know how to do that. So, agree with it in principle or not, a trial of the technology before that happens is a sensible thing to do.”

Exetel claimed the filter trial had to be mandatory as an opt-in pilot would be “technically infeasible”.

The 56 problems recorded in the trial were not caused by the filters, and the ISP did not notice reduction in network speeds.

The filters used a BGP session between Exetel and the filtering server which resolves the blacklist to IP address and announces the addresses as /32 prefixes. ISP traffic requesting access to blacklisted are directed to the filter server which itself acts as a simple proxy for any whitelisted URL.

Exetel reported the configuration “imposes virtually no extra load on any part of the ISP network” and avoids overblocking: “it is hard to see how even a low end server would not be able to meet the demands of a very large ISP,” Waddington said. “It places so little load, and needs so little bandwidth, that for the trial we created a tunnel between our border router and a Watchdog filter server in New Zealand to make them look adjacent.”

More about: etwork, Internet Watch Foundation
References show all

Comments

1

TheWomp

Mon 04/05/2009 - 23:01

If this is a "success" they should release their results

If this is such a "success" they should be happy to release their results in full.

I'd like to find out where those 20,000 censored searches were actually going.

And, what have they done about those 20,000 accusations of paedophilia, have they reported them to the police? Did they send the users emails urging them to get help? Offer them a subscription to an encrypted tunneling service?

And, what is that $6 per user cost based on, is it 100% user take up due to government censorship, or is it based on an extrapolation of the user figures for the previous government's free home filters which I believe was less than 1%

2

Anonymous

Mon 04/05/2009 - 23:26

Zombie or hijacked computers?

Prove in a court of law that the owners actually requested the material. Then prove it wasn't an inadvertent click. Then prove the ages of all individuals in the pictures/video.

Did the trial involve an attack on the filter by security testers or miscreants? The exceptions are what need testing. 20 zombie machines could overload it.

Peering with NZ for a filter is ludicrous.

Steve Waddington has also abused customers http colon slash slash stewartmedia dot biz slash myblog slash Why-Im-leaving-Exetel

3

Peter Mancer - Watchdog

Tue 05/05/2009 - 06:37

Filtering Technology

Just a minor correction to the article. The filter server is not a proxy but a packet inspection device. This avoids proxy-based issues such as the recent Wikipedia incident in the UK.

4

Anonymous

Tue 05/05/2009 - 08:11

Settle down princess! Who cares what you do fool? Stop spreading your FUD!

5

NeilMc

Tue 05/05/2009 - 08:33

Problem with the trial

There is a problem that was acknowledged by Peter Mancer in relation to this system and what the government proposes.

When asked if this filter would cope if you had a youtube URL on the blacklist (effectively causing the all of the ISP's youtube traffic to be routed through the filter) he said it was a theoretical problem because list managers wouldn't do that. Youtube have a policy for removing illegal material and that should be used rather than blacklisting.

That's where the problem lies for the government. They already have a youtube URL on the blacklist. The government has backed away from using the ACMA list and it's now "almost exclusively refused classification". But.... the youtube on the current blacklist is Refused Classification. Not illegal material though and Youtube won't be taking it down.

There are 4 other clips that I'm aware of that are RC according to the classification board. There are likely hundreds or even thousands more.

Peter Mancer's solution if a youtube url made it onto the list to keep the filter running smoothly? He'd whitelist youtube. So you effectively have a vendor overriding the government on what gets blocked.

Runaway success indeed. Internet censorship continues to be a monumental farce.

6

Jorgen

Tue 05/05/2009 - 09:00

Testing the filter?

How many of Exeltel's customers would go to wikileaks and try a few clicks on that list just to check out whether they were being filtered or not? To make blanket statements regarding the depravity of their user base is mildly offensive imho.

7

Anonymous

Tue 05/05/2009 - 09:54

yes, opponents of mandatory internet censorship are insignificant, effeminate fools who will immediately comply with your demand to be silent.

*tee hee*

8

Shannon

Tue 05/05/2009 - 10:15

Nice twisting

I love how this article has twisted the words from Lintons blog to serve it's own agenda - ie: 20,000 hits from 1%. This article is obviously pro-filter, I've read a very similar article which is quite obviously anti-filter with the same quote.

“it is hard to see how even a low end server would not be able to meet the demands of a very large ISP,” - Until someone blacklists a youtube address.

Exetel's trial still doesn't address one of the key consernes of the anti-filter/censorship mob - Scope creep.

9

Shannon

Tue 05/05/2009 - 10:18

Nice twisting

I love how this article has twisted the words from Lintons blog to serve it's own agenda - ie: 20,000 hits from 1%. This article is obviously pro-filter, I've read a very similar article which is quite obviously anti-filter with the same quote.

"it is hard to see how even a low end server would not be able to meet the demands of a very large ISP," - Until someone blacklists a youtube address.

Exetel's trial still doesn't address one of the key consernes of the anti-filter/censorship mob - Scope creep.

(Sorry about the double post - the comment box couldn't handle the quotes used on the page)

10

Anonymous

Tue 05/05/2009 - 10:20

I'd be interested to see a study of how many compromised computers are around in the general public. It's not inconceivable that there are botnets that exist solely for the purpose of this sort of thing. Personally, I've experienced my computer being compromised to become part of a botnet, and while it was obvious to me that there was something wrong, most people don't know enough to realise.

On another matter, the government can't use any of this data to justify its filtering plans, as Exetel haven't used their blacklist. So the fact that there are this many hits on a subset of the government's list and that it was able to easily handle the load from that level of hits doesn't mean that the increased load from the larger list won't cause problems.

Personally, I think that if the government wants to do this, they should be providing the clean feed directly to each ISP. Thay way we know who to blame if there's a slowdown.

11

Anonymous

Tue 05/05/2009 - 10:21

Why should it cost the user??

The government decides to censor the resources on the internet, and we pay $6 a year for it?
Why should this not be incurred by the government if that is their wish to filter internet content??
I certainly did not ask for my internet to be filtered. I don't understand why I should pay extra $6 for my internet services.
It's really not that much, but it is a cost I would not otherwise have to incur.

12

Anonymous

Tue 05/05/2009 - 10:37

Runaway success?!?

How can this filter trial be labelled a "runaway success" when the Managing Director of Exetel says that it can be bypassed by anyone that is "mildly technically competent"?!?!

I would say that it doesn't even require "mild" technical competency to visit a proxy website and surf from there... and proxy websites can be found with Google. Anyone on the Internet knows how to use that...

13

Anonymous

Tue 05/05/2009 - 10:40

To all those people who support "the right to view child porn".

Why don't you all head off to the USA where hopefully you will get shot by one of the people who support "the right to bear arms".

To me, the lame arguments put forth by the anti-filtering lobby is no different to the gun lobby.

14

Anonymous

Tue 05/05/2009 - 11:31

Trolling or clueless?

Assuming the latter, what are your counter arguments to the "lame" arguments of the "anti-filtering lobby"? Taking these "lame" arguments for example - what would be your counter arguments?
1 - any "mildly technically competent internet users" can bypass these filters with ease
2 - the ACMA blacklist has been shown to contain far more than just child porn and illegal material

15

BieRHeDD

Tue 05/05/2009 - 11:33

Think of the children?

Seeing that anyone technically minded can circumvent any proposed filter, and the government's cry is to protect the children, why don't they forget the whole mandatory part, and just subsidise parents who want to buy filtering software from one of the countless number of software producers.

Any "complaint" based filter is doomed to failure anyway. Parents will stop supervising their children expecting the filter to protect them. In reality it requires a complaint to the filter authority to have content blocked. So someone has to see it and report it before any filtering takes place. This leaves (how many million?) pages still available to the unsupervised children. Dynamically changing URLs by the millisecond.

The filter is hardly going to help the police profile paedophiles either. I'd imagine they'd have private networks set up that don't make use of http.

The whole proposal is flawed.

16

Anonymous

Tue 05/05/2009 - 11:34

Guns don't kill people, porn kills people

Don't mix two completly different arguments and roll them up into a ball. Everyone is for filtering out child pornography. But the argument isn't about that, child porn is a buzz word used by the government to basically say "if you are against filtering the internet, you support child porn" and your comments prove that point.

The problem with the filter, while I am glad that they have proven a technically sound way of getting it done, is the political side of the filter. They want to filter anything that is refused classification, this includes REGULAR pornography, online gambling and even sites that have politcally conflicting views of the Australian government.

Be informed, not brainwashed.

17

Anonymous

Tue 05/05/2009 - 11:38

re: Think of the childeren

The government already has a free web-filter scheme for parents. But the filter had very little uptake. Even most ISP's offer filtering for low rates or free of charge.

So it's not about "protecting our childeren", because for that, they would go and educate parents, heavily advertise the free filtering software and actively persue thoes that distribute child pornography and shut them down, not just tell us to look the other way.

18

Anonymous

Tue 05/05/2009 - 11:39

Deeply flawed

This is a hopeless article that did not attempt to look behind any of the claims made.

The filter deployed is of a type that works well if only a few, out of the way hosting sites are involved. But the proposed government filter has large sites on it. All traffic to large sites would go through the filter if used in production. Hence, this test is fatally flawed and can only be used to muddy the waters.

Further, it is my expectation that all of the attempts to access filtered sites are from people using the leaked ACMA list to see what is on Exetel's list. To claim that Australia is overrun with pedophiles because of this skewed data is ludicrous.

Then you have the bizarre assertion that the trial was a runaway success while also claiming that the filter can be bypassed by anyone who is not a drooling idiot. By what measure is this a success of any sort?

I am deeply disappointed in this article that gives uncritical support to the assertions of self-interested parties. Please correct and resubmit!

PS Why does your system see my submission as spam?!

19

Anonymous

Tue 05/05/2009 - 11:41

re: Why should it cost the user??

Why should it cost the taxpayer? If the people who pay for internet access dont cover the cost, it just comes out of the taxpayer. Besides... its $6 a year... 50c a month. Really? is that worth arguing about?

20

Anonymous

Tue 05/05/2009 - 12:02

On the contrary, nothing useful will result from filtering child porn. It is a hopeless waste of time and an attempt to sweep it under the carpet.

Instead, we should be pursuing it back to its source, arresting the perpetrators and rescuing the victims. This is accomplished via police work, and is not assisted in any way by filtering.

Once you accept the utility of a filter for any purpose, then you are open to scope creep up to and including full Chinese style censorship. Child porn is being used as a boogey man to scare normally sensible people into yielding their rights. Sadly, your sacrifice will result in no extra safety for any children, and at best will give a sanitised appearance of improvement while allowing victimisation to continue unabated.

Every cent spent on filtering is wasted, and should instead be given to the police force. Every politician that claims to be thinking of the children on this filtering issue should be challenged to show how it can help, rather than hinder, and how it beats police work in effectiveness. Since it doesn't, all politicians in favour of the filter are being dishonest, and are actively working against the needs of their constituents, including their children.

21

Anonymous

Tue 05/05/2009 - 13:04

It's not scope creep, it's scope avalanche

The problem is that while the government talks about child porn, it clearly means to use The Filter to secretly censor much more than that.

It's a technique (using constant references to the need to protect children) that notoriously was developed in Germany in the 20s and 30s.

Our government has never limited the stated ambit coverage of The Filter to child porn, although that has been the public justification they have promoted. They have admitted that censorship will apply to any "inappropriate" material, at the secret discretion of the minister or his appointees.

Surely even the "think of the children" brigade can see the dangers in that, given that The Filter also won't do what they think/hope it will.

22

Eddie

Tue 05/05/2009 - 13:51

Very poor article.
Exetel's

Very poor article.

Exetel's trial was NOT a success as they did not conduct the trial in the manner that the government wants to deploy their filter.

And how do they know if the alleged 20,000 hits or attempted hits were really for CP sites? Unless they know what the contents of the blacklist is, Exetel cannot credibly claim there were 20,000 hits or attempted hits to CP sites.

23

Anonymous

Tue 05/05/2009 - 14:45

Tax vs Fees

Considering most taxpayers have internet, and most internet customers pay tax, whether you pay 50c per month via your ISP, or 50c per month of your taxes are spent on this instead of (insert govt discretionary expenditure item here) doesn't really matter. You still pay for it!

Mind you, I don't support the filter. Nor does Exetel.

At least they admitted publicly that they are testing something (how many ISPs have tested something and NOT admitted it).

24

Anonymous

Tue 05/05/2009 - 15:29

Here comes the lame excuses "They want to filter anything that is refused classification, this includes REGULAR pornography, online gambling and even sites that have politcally conflicting views of the Australian government."

Where are the facts that they are actually going to filter out something like "politcally conflicting views". This is just utter rubbish.

The two topics have very much similar veins to them. The gun lobby argued that gun control would be useless and that if people wanted a gun they could bypass the controls put in place.

25

Anonymous

Tue 05/05/2009 - 15:43

"Here comes the lame excuses" - spoken like someone who has never had a critical thought in their lives.

"Where are the facts that they are actually going to filter out something like "politcally conflicting views". This is just utter rubbish." - I never mentioned that the government would, 100% do this, but the public has a genuine concern it could happen, and with a secret list it is more likely to happen without public knowledge.

"The two topics have very much similar veins to them. The gun lobby argued that gun control would be useless and that if people wanted a gun they could bypass the controls put in place." - and thank <deity of choice>, every single gun in Australia is registered and owned by honest, law abiding citizens... oh, wait...

26

Anonymous

Tue 05/05/2009 - 16:16

2 flaws with the trial that I can see straight off the bat:

1) The trial was not carried out double-blind. Users who knew about the trial may have deliberately tried to skew the data collected by Exetel in order to discredit the trial.

2) The "20,000 hits" refers to hits against their list of IP addresses. This does not indicate that uses were accessing illegal material in all cases. To do so would suggest that all content at all listed IP addresses contained illegal material.

It's good to see Exetel tesing the waters and working out basic costs, but this flawed trial = flawed data.

27

klaw81

Tue 05/05/2009 - 16:25

Here comes the lame responses

"Where are the facts that they are actually going to filter out something like politcally conflicting views?" The real question is "What STOPPING them from filtering whatever they want?" And the answer is a fact confirmed by Conroy himself - NOTHING!

The gun lobby argued that gun control would be useless and that if people wanted a gun they could bypass the controls put in place. And you know what? They were right! Armed robbery and other gun-related crime is still happening out there - so much for the "gun filter."

The fact is that the internet filter will be far easier to bypass than the gun filter, far less effective, and will have many more far-reaching civil and financial consequences than the virtual criminalisation of gun ownership.

28

Anonymous

Tue 05/05/2009 - 16:30

The article is poorly written.

29

Anonymous

Tue 05/05/2009 - 17:42

As we found out with the lame excuses the gun lobby put out, since we now have gun control, which country has less gun related deaths per capita, Australia or the USA.

All the excuses in the world to stop filtering cannot escape one fact - Child porn will be less accessible with filtering just as with gun control - guns are harder to get.

So what type of country do you want, Safer or not. Because that's what it boils down to.

Of course it wont eliminate access to child porn, that's just naive. Just as gun control has not eliminated gun related deaths. BUT IT HAS REDUCED IT, and as a result we are a safer country.

30

Anonymous

Tue 05/05/2009 - 18:35

@Child porn will be less accessible with filtering

Hardly. Its not hard to get around a filter like that.

31

Anonymous

Tue 05/05/2009 - 18:42

poorly written article, 90% of the comments on here are apposed to the filter does that tell you something. Its not wanted and all the fake good publicity in the world isnt going to change that.

32

Ben

Tue 05/05/2009 - 19:15

Spend money wisely

Firstly, more than 99% of material classified as child abuse material is not on the web, but in peer-to-peer networks. You said that of course they can't eliminate it, but any reduction is worth it. But is spending $44,200,000 on a filter which will block far less than 1% of the total volume of this material, really worth it. Wouldn't it be far more effective to give this money to the police so they can stop pedophilia and CP in its tracks?

Secondly, you compared the gun control arguments to the anti-censorship arguments. Could a person obtain a gun in 30 seconds? That is how how quickly it would be to get around the filter by using a web proxy. Even a pedophile who is not in with the peer-to-peer networks, do you really think that if they see a stop sign on a web page that they will stop there? Do you think they will go to a proxy site and bypass it? Give the money to the police to shut down the material, and the pedophiles wouldn't be able to access it either way.

33

phx

Tue 05/05/2009 - 19:35

Test on IP-Ranges

Have these clowns heard of shared hosting? Its not uncommon for low-volume hosting providers to hang hundreds of domains off a single IP.

34

Anonymous

Wed 06/05/2009 - 12:24

Re: As we found out with the lame

You may be truly confused about both the gun laws in Australia and the real agenda behind The Filter, but you need to get your facts right if you want to retain any credibility.

The amount of crime involving guns in Australia is the same now as before the gun laws were implemented more than ten years ago. Handguns have always been illegal here, and the only thing that the gun laws changed was that reportedly the price of a "piece" (pistol) on the criminal market went from $500 to $1,000 because more police resources were allocated to this area.

And nothing in what we have been told by supporters of The Filter is inconsistent with the ability of the government to secretly ban "inappropriate" content. They can add any political, religious or secular material to the secret blacklist. The fact that most of the sites on the existing blacklist have nothing to do with child porn confirms this.

35

Anonymous

Wed 06/05/2009 - 18:51

And then the lame justification that ignores the facts.....

You claim that "Child porn will be less accessible with filtering just as with gun control - guns are harder to get."

Just as guns are still NOT hard to get and that armed robbery has had no significant decline, this filter will not effect the supply and demand for child pornography... simply because the supply of both guns and CP have been "underground" for years and only law-abiding citizens are affected by the laws.

Exetel and even Conroy himself has admitted that that filter circumvention is both trivially simple and legal. Even if this was not the case, the filter is not directed at the sources of CP (private networks and peer-to-peer) but instead filters normal webpages where very little child pornography can be found even if you search for it.

The real fact of the matter is that the filter will have ABSOLUTELY NO EFFECT on the supply and demand for child pornography, and even the Federal Police have confirmed this. We can only assume that the Government is chasing after other unstated goals.

36

fred johnson

Fri 15/05/2009 - 04:20

Internet filter

Darren Pauli is an idiot, so you have a filter that is basically useless and say it's a great product real clever.

Here's an idea spend the money on hunting down those making this tasteless material like the dogs they are and help REAL children instead of wasting money and hiding recorded images of the problem from people who do not want their delusion of a super happy world shattered by reality.

Seriously if the government start filtering any other content with this system I think that would be a clear message it is time for any intelligent Australian to leave this country.

37

gfrend

Sat 16/05/2009 - 11:18

We need to watch Conroy now

The furore about secret government censorship using The Filter has died down a bit, so Conroy and Rudd will hope they can get away with suddenly announcing that the trial has been an outstanding success and The Filter will start immediately.

We need to get the truth about this f---wit idea out into the general media, not just on tech sites like this where everyone understands the con job that the govt is trying to pull.

Parents, and members of the religious lobbies, need to be told that The Filter won't remotely do what is claimed, and that the govt seems to be running a hidden agenda to secretly ban whatever it deems "inappropriate". Like any opposition to govt policies, for instance.

38

Darren Pauli

Wed 10/03/2010 - 08:37

Note that this article reports on Exetel findings. It is not analysis or editorial.
Regards,
Darren.

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the Computerworld comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: internet content filter
Whitepapers
All whitepapers
Sign up now to get free exclusive access to reports, research and invitation only events.
Featured Download
/downloads/product/14/gimp/

GNU Image Manipulation Program (GIMP)

When you think Open Source software, you may think of half-baked programs too hard to use, or perhaps lacking power. Well, think again. This Open ...

Computerworld newsletter

Join the most dedicated community for IT managers, leaders and professionals in Australia