block download from web forums (Full Version)

All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering



Message


alfarhoud -> block download from web forums (4.Dec.2005 10:33:11 AM)

Hi people this Is my first post [:)]
 
I installed MS ISA 2004 on my network for testing before I go production with it and I configured the policies of the http web filter to block downloadable files such as .exe .zip .rar …….etc….etc and when I test it worked like a dream [&:] up until I tried to test the download on a VBulletin forum and it did download from it.[:@]
 
My question is how can I block the downloads from forums????[8|]




tshinder -> RE: block download from web forums (7.Dec.2005 9:12:05 PM)

Hi Alfar,

What is the URL that allowed the download?

Thanks!
Tom




Guest -> RE: block download from web forums (7.Dec.2005 9:41:36 PM)

right click your rule > configure Http

under the Extensions Tab add what even extension u want to block. [:)]




alfarhoud -> RE: block download from web forums (7.Dec.2005 10:43:33 PM)

hi Tom

this is the url for the forum

www.al-hatif.com/vb

humm the site is in arabic so let me give you a direct link for a downloadable file

http://al-hatif.com/vb/showthread.php?t=190

and majdal
 
i did that and its working for normal site the idea is to block it for forums [;)]




tshinder -> RE: block download from web forums (8.Dec.2005 2:12:12 AM)

Hi Alfar,

I'm not sure where to clck. When I clck on something that looks like a .zip icon, it takes me to another page which looks like a log on page.

Tom




alfarhoud -> RE: block download from web forums (17.Dec.2005 2:33:24 PM)

ohh yes tom you need to log in to download[8D]

i made an account for you to use log/pass: tom/tom  [;)]

go to the link and see what you can do

Yours Alfarhoud




elmajdal -> RE: block download from web forums (17.Dec.2005 3:16:10 PM)

man , i logged in and tried the download  with what i said to u before , i was blocked to download the zip files.

check ur isa rules , maybe u have another rule that is bypassing ur users.




tshinder -> RE: block download from web forums (17.Dec.2005 4:16:00 PM)

Hey guys,

Here is my log file result:

Original Client IP Authenticated Client Service Server Name Referring Server Destination Host Name MIME Type Object Source Source Proxy Destination Proxy Bidirectional Client Host Name Network Interface Raw IP Header Raw Payload Source Port Processing Time Bytes Sent Bytes Received Cache Information Log Time Client IP Destination IP Transport Destination Port Protocol Action Rule Client Username URL Source Network Destination Network HTTP Method Filter Information Error Information Result Code Log Record Type Client Agent HTTP Status Code
0.0.0.0 Yes Proxy CELESTIX-H5L4CS  al-hatif.com application/zip Internet - -  - - - - 0 721 77132 636 0x1a00000 12/17/2005 9:14:45 AM 192.168.1.70 66.116.229.37 TCP 80 http Allowed Connection All Open Users CELESTIX-H5L4CS\tshinder http://al-hatif.com/vb/attachment.php?attachmentid=487&d=1122412545 Internal External GET  0x480  Web Proxy Filter Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; InfoPath.1; .NET CLR 2.0.50727) 200

Notice that the MIME type does indicate that a zip file is being downloaded, but the file extension is not included in the request, so you need to block the MIME type in addition to the file extension using Content Groups.

HTH,
Tom




Page: [1]