Welcome to ISAserver.org

block downloads over http

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> block downloads over http

Page: [1]

Message

<< Older Topic Newer Topic >>

block downloads over http - 18.Oct.2007 11:32:20 AM

mmansour

Posts: 12
Joined: 8.Oct.2007
Status: offline

i have rule that all onlt http for users and aonther one to block ftp to prevent downloads but i found all websits like groups you can downloads from it without need to log for ftp site to download plz need help how to block or disable download from http sites

Post #: 1

Featured Links*

RE: block downloads over http - 18.Oct.2007 1:38:10 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

quote:

but i found all websits like groups you can downloads from it without need to log for ftp site to download plz

can you explain more by examples .

what sites ? what do you want to block ?

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to mmansour)

Post #: 2

RE: block downloads over http - 18.Oct.2007 7:35:20 PM

royh

Posts: 284
Joined: 23.Feb.2007
From: Lebanon
Status: offline

Hi,

You can block desired extensions and allow all others in HTTP policy of your rule.
Just right click your allow rule; click configure HTTP; on the extensions tab add the extensions to block. ISA will deny downloading files and applications having the extensions blocked in your rule.

HTH,

Roy.

_____________________________

Roy Haddad,M.Sc
CCNA, MCSE 2003 Messaging & Security,C|EH

(in reply to mmansour)

Post #: 3

RE: block downloads over http - 18.Oct.2007 8:54:41 PM

mmansour

Posts: 12
Joined: 8.Oct.2007
Status: offline

dear sir
i want to block all kinds of download it means users alllow to browes only http sites only and can't download any thing
sites like i mean
www.dvd4arab.com you can download from it over http
so i need to block all sites like this

(in reply to elmajdal)

Post #: 4

RE: block downloads over http - 18.Oct.2007 9:04:36 PM

mmansour

Posts: 12
Joined: 8.Oct.2007
Status: offline

dear sir
yes i can block desired extensions and allow all others in HTTP policy of my rule.
but i will need to add all kind of file format and programes and music and compres files and other much more and it will take more than 3 or 4 monthes to do and maybe someone found new extension or make someone to avoid my rule so all i need to prevent all kinds of download for some users so what shall i do

(in reply to royh)

Post #: 5

RE: block downloads over http - 19.Oct.2007 8:00:05 AM

mmansour

Posts: 12
Joined: 8.Oct.2007
Status: offline

dear sir
i try another thing i create the rule allow only http protocol and in the content types tap i select only html documents and images and i found now the download for most files extensions is block but i need to be more sure and find something more hard to prevent all types of download

(in reply to mmansour)

Post #: 6

RE: block downloads over http - 19.Oct.2007 8:55:43 AM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

check this article : http://elmajdal.net/isaserver/Block_Desired_Extension_Content_Type.aspx

u can block downloads using Content Type as well.

my article also discuss how to block using selected extensions, but as u said, if you want to block everything, then right click your http rule > configure http > Extension Tab > from the drop down list, block all extension , allow only selected and start filling the extensions you want to allow, html , jpg, php, asp and the list goes on.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to mmansour)

Post #: 7