Welcome to ISAserver.org

Signature blocking

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> Signature blocking

Page: [1]

Message

<< Older Topic Newer Topic >>

Signature blocking - 12.Jan.2006 10:18:06 PM

Makora

Posts: 23
Joined: 24.Dec.2005
Status: offline

Hi,
I wanted to know the signatures of worst download managers like Internet download manager,
download accelerator, flash get.

also tell me how to block it from through http filter, reply in full details
Thanks-in-Advance...

Post #: 1

Featured Links*

RE: Signature blocking - 12.Jan.2006 11:49:49 PM

elmajdal

Posts: 5103
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

i dont have what u r requesting , but i have another list that is usefull also

once u read this , u will know how to block but signature

(in reply to Makora)

Post #: 2

RE: Signature blocking - 13.Jan.2006 11:15:45 AM

Makora

Posts: 23
Joined: 24.Dec.2005
Status: offline

every software have its own signature, i want the signatures of download managers like internet download manager,
download accelerator, flash get, etc etc

(in reply to elmajdal)

Post #: 3

RE: Signature blocking - 15.Jan.2006 1:46:17 PM

elmajdal

Posts: 5103
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

well , if u cant find a signature , u still can block these applications by blocking them using:

Configuration > General > Define Firewall Client Settings > Application Settings >

add:

app. name > Disable > 1

example :

skype Disable 1

(in reply to Makora)

Post #: 4

RE: Signature blocking - 15.Jan.2006 3:12:09 PM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

All that does is exclude the FWC. It does nothing for WP or S-NAT.

Microsoft lists some common sigs at http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/commonapplicationsignatures.mspx

Take a look also at their preventitve measures at http://www.microsoft.com/isaserver/support/prevent/default.mspx

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to elmajdal)

Post #: 5

RE: Signature blocking - 15.Jan.2006 6:54:23 PM

Moez

Posts: 13
Joined: 14.May2003
From: Tunisia
Status: offline

Hi,

And also another complementary list http://moez.zeblog.com/7865-common-application-signatures/

Thanks

_____________________________

Moez Mezghani [MVP ISA Firewall]- Tunisia
http://fr.groups.yahoo.com/group/isaserver_Fr/
http://www.waykos.com/
http://moez.zeblog.com/

(in reply to LLigetfa)

Post #: 6

RE: Signature blocking - 15.Jan.2006 7:49:18 PM

denli

Posts: 27
Joined: 15.Jul.2005
Status: offline

I was looking for how to block ssh over http and I found this site very interesting.
http://www.icir.org/vern/papers/backdoor/

_____________________________

/Dennis

(in reply to Moez)

Post #: 7

Thanks Alot :> - 15.Jan.2006 11:01:03 PM

Makora

Posts: 23
Joined: 24.Dec.2005
Status: offline

Thanks Alot for giving the signatures of applications

(in reply to denli)

Post #: 8

RE: Thanks Alot :> - 15.Jan.2006 11:21:11 PM

elmajdal

Posts: 5103
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

hahahaha

we all replied , but have u noticed something

, none of these signatures were what u asked for .

Truley , we couldnt find what u asked for

(in reply to Makora)

Post #: 9

RE: Thanks Alot :> - 16.Jan.2006 12:02:23 AM

Moez

Posts: 13
Joined: 14.May2003
From: Tunisia
Status: offline

_____________________________

Moez Mezghani [MVP ISA Firewall]- Tunisia
http://fr.groups.yahoo.com/group/isaserver_Fr/
http://www.waykos.com/
http://moez.zeblog.com/

(in reply to elmajdal)

Post #: 10