Welcome to ISAserver.org

Stoping Ninja Proxy and Messenger

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> Stoping Ninja Proxy and Messenger

Page: [1]

Message

<< Older Topic Newer Topic >>

Stoping Ninja Proxy and Messenger - 12.Nov.2009 3:21:10 PM

isa_rooky

Posts: 48
Joined: 22.May2009
Status: offline

Hi everybody,
Is there a way to stop Ninja proxy website and messenger using my Isa Server 2006 stardard edition?

Thanks in advance!!

Post #: 1

Featured Links*

RE: Stoping Ninja Proxy and Messenger - 13.Nov.2009 8:33:22 AM

paulo.oliveira

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

you can block websites by using domain name set and block msn using messenger signature.

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to isa_rooky)

Post #: 2

RE: Stoping Ninja Proxy and Messenger - 16.Nov.2009 9:15:15 AM

isa_rooky

Posts: 48
Joined: 22.May2009
Status: offline

Hi Paulo and thanks for your reply.
The way I'm doing it is by adding a new rule where I deny all the domains I want, but in this particular case does not work with Ninja Proxy website. Can you please help me on this?

(in reply to paulo.oliveira)

Post #: 3

RE: Stoping Ninja Proxy and Messenger - 16.Nov.2009 10:22:47 AM

paulo.oliveira

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

are you using domain name set or URL set?

Can you provide details on your access rule?

Is it above the allow access rule?

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to isa_rooky)

Post #: 4

RE: Stoping Ninja Proxy and Messenger - 16.Nov.2009 10:35:37 AM

isa_rooky

Posts: 48
Joined: 22.May2009
Status: offline

Hi again Paulo and thanks a lot for your quick reply.
I'm using domain name set and is above the allow access rule. Is in the first place in my Firewall policy screen.

(in reply to paulo.oliveira)

Post #: 5

RE: Stoping Ninja Proxy and Messenger - 16.Nov.2009 11:12:06 AM

paulo.oliveira

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

is this site HTTPS? If so, ISA does not have a native HTTPS inspection feature, you may have to install a 3rd-party software:
http://www.collectivesoftware.com/
or
http://www.redline-software.com/eng/products/tk/components/ssl_decoder.php

On the other hand TMG (next ISA version) will have this feature built-in.

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to isa_rooky)

Post #: 6

RE: Stoping Ninja Proxy and Messenger - 16.Nov.2009 11:34:59 AM

isa_rooky

Posts: 48
Joined: 22.May2009
Status: offline

No, is not a HTTPS site. This is the address: http://myninjaproxy.info/

(in reply to paulo.oliveira)

Post #: 7

RE: Stoping Ninja Proxy and Messenger - 16.Nov.2009 1:06:02 PM

paulo.oliveira

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

can you provide details on your access rule and your domain name set?

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to isa_rooky)

Post #: 8

RE: Stoping Ninja Proxy and Messenger - 16.Nov.2009 1:46:11 PM

isa_rooky

Posts: 48
Joined: 22.May2009
Status: offline

Ok, this is how I created my rule:
1) Named my access rule.
2) On this applies to: All outbound traffic.
3) This rule applies to traffic from these sources: Internal
4) This rule applies to traffic sent to these destinations:
Here is where I go to Network Entities. click on Domain Name Sets and click add new Domain Name Set and type all the domains I want to block like this *.domain.com
5) This rule applies to requests from the following user sets: All users.

I hope this can help you.
Thanks again for following my issue.

(in reply to paulo.oliveira)

Post #: 9

RE: Stoping Ninja Proxy and Messenger - 16.Nov.2009 5:39:41 PM

paulo.oliveira

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

humm... it seems fine to me. Try *myninjaproxy.info

What does ISA log telling you?

Does your internal network range the same as your ISA Internal Network definition?

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to isa_rooky)

Post #: 10

RE: Stoping Ninja Proxy and Messenger - 17.Nov.2009 10:23:06 AM

isa_rooky

Posts: 48
Joined: 22.May2009
Status: offline

Hi Paulo, I tried what you suggested and it worked great. The problem was related with the dot before the domain.

Thanks a lot for your help!!!

(in reply to paulo.oliveira)

Post #: 11

RE: Stoping Ninja Proxy and Messenger - 17.Nov.2009 4:36:38 PM

paulo.oliveira

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

great!! That�s why I always put *domain.com

no dot!

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to isa_rooky)

Post #: 12

RE: Stoping Ninja Proxy and Messenger - 18.Nov.2009 8:36:39 AM