Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

block download zip files from gmail

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> block download zip files from gmail Page: [1]
Login
Message << Older Topic   Newer Topic >>
block download zip files from gmail - 16.Jul.2007 4:52:20 AM   
auchanaka1980

 

Posts: 100
Joined: 16.Jan.2007
Status: offline
Hi,

i configured the rule to block the exe,zip file, when they try to download the file i's block, i try to download zip file from my gmail i can download without having anyproblem, how can i block the that,

via gmail how to block the file download.

pls help to me.
Post #: 1
RE: block download zip files from gmail - 16.Jul.2007 11:14:38 AM   
ferrix

 

Posts: 369
Joined: 16.Mar.2005
Status: offline
When I try to get a zip through gmail, the headers come back as:
quote:


Cache-control: private
Pragma:
Content-Type: application/zip
Expires: Tue, 17 Jul 2007 15:08:13 GMT
Content-Disposition: attachment; filename="filename.zip"


I don't know how you have your filter set up, but it seems you could block the signature "application/zip" and it ought to work.

Your gmail isn't going over https is it?  (mine was just http).  Anything over https ISA can't see without a third-party add on software.

(in reply to auchanaka1980)
Post #: 2
RE: block download zip files from gmail - 16.Jul.2007 11:20:40 PM   
auchanaka1980

 

Posts: 100
Joined: 16.Jan.2007
Status: offline
thanks for ur reply. i want to do

I wants to block attachment for yahoo,hotmail,gmail users. How can I achieve this

yes, gmail connecting https.

help me to block attachment.

(in reply to ferrix)
Post #: 3
RE: block download zip files from gmail - 17.Jul.2007 8:22:18 AM   
ferrix

 

Posts: 369
Joined: 16.Mar.2005
Status: offline
Well I'm not an expert on every filter available for ISA, but there are probably ones that can do more intelligent signature blocking than the built-in http filter.  But even the built-in one should be able to match the mime types of attachments you wish to block.

If you want ISA to be able to inspect and control traffic inside HTTPS you need a third-party add on because ISA 2006 can't do this by default.  Take a look at ClearTunnel under the "software->content security" section of this site. 

Probably easier just to block webmail destinations completely though :)

(in reply to auchanaka1980)
Post #: 4
RE: block download zip files from gmail - 19.Jul.2007 5:09:43 AM   
auchanaka1980

 

Posts: 100
Joined: 16.Jan.2007
Status: offline
thanks for ur mail, still i didn't get the corect answer.

pls help me to solve this problem.

regards,
chanaka.

(in reply to ferrix)
Post #: 5
RE: block download zip files from gmail - 20.Jul.2007 3:29:19 PM   
ITEngineer

 

Posts: 258
Joined: 3.Feb.2006
Status: offline
have you seen this http://elmajdal.net/isaserver/Block_Desired_Extension_Content_Type.aspx

(in reply to auchanaka1980)
Post #: 6
RE: block download zip files from gmail - 22.Jul.2007 5:36:50 AM   
justmee

 

Posts: 505
Joined: 14.May2007
Status: offline
Hi,
Yes, the link ITEngineer gave might do the trick.
However playing with Content Type on ISA rule might be tricky because you should be aware of what those fields means otherwise you can block something else.
http://www.ietf.org/rfc/rfc2616.txt
Gmail will use ssl after login if you go by:
https://www.gmail.com
In this case ClearTunnel will do the trick.
I have it on my ISA 2006.
If you go by
http://www.gmail.com
it will not use ssl after login.
For gmail you can create a rule for the following Domain Name Sets(it might be others too, this is what I have observed):
googlemail.com
mail.google.com
And create a signature like:
Search in: Response Headers
Http Header: Content-Type
Signature: zip
or/and
Search in: Response Headers
Http Header: Content-Type
Signature: rar
Also you can block users from downloading attachments using the following signature(obviously you can restrict this for the sites required):
Search in: Response Headers
Http Header: Content-Disposition
Signature: attachment
I've tested this with gmail yahoo, hotmail.
Regards!

< Message edited by justmee -- 22.Jul.2007 5:37:52 AM >

(in reply to ITEngineer)
Post #: 7

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> block download zip files from gmail Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts