Welcome to ISAserver.org

Site & Content Rules

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> Site & Content Rules

Page: [1]

Message

<< Older Topic Newer Topic >>

Site & Content Rules - 7.Oct.2004 8:15:00 AM

PaulMStewart

Posts: 10
Joined: 10.May2004
From: nz
Status: offline

Cannot figure this one out. I downloaded a destination set from http://www.isastuff.mine.nu/ to block sex sites. Destination set created Ok and Site and content rule applied. It all works fine apart from www.isaserver.org gets blocked with this S&C rule enabled. Weird eh ! Nothing remotely similar to isaserver.org appears in the destination set and there are no IP address in the destination set. Any help ???

Regards

Post #: 1

Featured Links*

RE: Site & Content Rules - 8.Oct.2004 2:21:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Paul,

I didn't know this site was considered as a sex site! [Big Grin]

Hmm... very weird! So, it sounds you are pretty sure it's because of that destination set that isaserver.org is no longer reachable. However, you can't find an entry that should match with this site. Right?

In that case, I would play with that destination set to find out which part is causing the problem. I.e. you can load only the first half and see if the problem still occurs. If not, take the second half. If it occurs, split it again and so on until you find the responsible entry.

HTH,
Stefaan

[ October 08, 2004, 02:25 PM: Message edited by: spouseele ]

(in reply to PaulMStewart)

Post #: 2

RE: Site & Content Rules - 8.Oct.2004 2:49:00 PM

bernard

Posts: 12
Joined: 27.Apr.2004
Status: offline

Hello,

I'm new to this stuff but how do I use the list in isa 2000 ?

Bernard

(in reply to PaulMStewart)

Post #: 3

RE: Site & Content Rules - 8.Oct.2004 8:37:00 PM

PaulMStewart

Posts: 10
Joined: 10.May2004
From: nz
Status: offline

Thank for your replies. I have figured out why isaserver.org was getting blocked. In the destination set there was any entry for *org . Of course this was blocking all .org sites.

And as for how you use the list Bernard !
You need to download ISA ADS from www.isatools.org , unzip it and then run the vbs script and enter the location of the xml file you wish to use. This will create a destination set for the addresses in the xml file and also create a site and content rule. There are more xml files on isatools.org and isastuff.mine.au that you can use for different categories.

On a slightly different note, I have lots of problems with site and content rules. I am now satisfied that i have rules in place to block Porn, warez, gambling sites etc. Also to stop downloading .exe files. The only one I cannot get to perform correctly is the ISA_ADS destination set. It works to a certain extent but gives me 'errors on this page' errors. Any suggestions !
Regards

(in reply to PaulMStewart)

Post #: 4

RE: Site & Content Rules - 8.Oct.2004 9:07:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Paul,

good to hear you have it working! [Smile]

I'm a little bit lazy today to check it out myself, but what's the goal of the ISA_ADS destination set?

HTH,
Stefaan

(in reply to PaulMStewart)

Post #: 5

RE: Site & Content Rules - 9.Oct.2004 2:19:00 AM

PaulMStewart

Posts: 10
Joined: 10.May2004
From: nz
Status: offline

Hi Stefaan
ISA_ADS destination set is supposed to block adverts on web pages.

Paul

(in reply to PaulMStewart)

Post #: 6

RE: Site & Content Rules - 10.Oct.2004 3:01:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Paul,

I assume this script just create a site&content rule with a particular destination set. So, nothing unusual. Right?

What do you mean *exactly* with "It works to a certain extent but gives me 'errors on this page' errors."?

HTH,
Stefaan

(in reply to PaulMStewart)

Post #: 7

RE: Site & Content Rules - 12.Oct.2004 4:39:00 AM

PaulMStewart

Posts: 10
Joined: 10.May2004
From: nz
Status: offline

Stefaan,
Yes thats right. It just creates a Site & Content Rule with a particular destination set.

What I mean exactly is : If the destination set included *ads.isoftmarketing.com anything that points to this will be replaced by my custom error (e.g.Access denied - Advertising). This does what it is supposed to on www.isaserver.org but comes up with 'errors on this page'

Some destinations are fine but others causes the error on page.
I have seen it work on Hotmail for example. All ads are blocked and no errors on page. But If i block the ads that are on the hotmail page, I get errors on page.
So, at first glance I would say that if the offending URL was removed from destination set, the ad would be displayed and no errors on page. Fine, but as I said, I have seen it work where all ads replaced and no errors on page.
So is it the offending URL's in destination set or something else ?

Regards
Paul

(in reply to PaulMStewart)

Post #: 8

RE: Site & Content Rules - 12.Oct.2004 8:28:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Paul,

this seems more to be a problem on the resulting web page after you have 'inserted' your custom error.

HTH,
Stefaan

(in reply to PaulMStewart)

Post #: 9

RE: Site & Content Rules - 12.Oct.2004 10:59:00 PM

PaulMStewart

Posts: 10
Joined: 10.May2004
From: nz
Status: offline

Hi Stefann,

Custom error works fine on certain pages though !

Paul

(in reply to PaulMStewart)

Post #: 10

RE: Site & Content Rules - 13.Oct.2004 9:24:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Paul,

because you replace the html code of the ADS with your own html code, I think you should thoroughly investigate the resulting html code of the whole resulting page.

HTH,
Stefaan

(in reply to PaulMStewart)

Post #: 11

RE: Site & Content Rules - 14.Oct.2004 7:20:00 PM

PaulMStewart

Posts: 10
Joined: 10.May2004
From: nz
Status: offline

Hi Stefaan,
Thanks for all your help on this one. I am happy that the site and content rules to block out porn, warez etc work fine. I am not going to dwell on getting the Ads destination set to work correctly. Too much else to do. Any way, I am going to put this one to bed now. Maybe, I will investigate more when time permits. Once again, thanks for your input.

Regards
Paul

(in reply to PaulMStewart)

Post #: 12

RE: Site & Content Rules - 14.Oct.2004 8:29:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Paul,

no problem at all and thanks for the follow up!

Stefaan

(in reply to PaulMStewart)

Post #: 13

RE: Site & Content Rules - 11.Apr.2005 10:27:00 PM

JSM

Posts: 7
Joined: 11.Apr.2005
From: Atlanta
Status: offline

I downloaded one of the banned site files that is in XML....I think I missed the part somewhere about how to incorporate that list into ISA...

pardon the slowness.....DOH [Eek!]