• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Trying to ban any URL that contains "PROXY"

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> Trying to ban any URL that contains "PROXY" Page: [1]
Login
Message << Older Topic   Newer Topic >>
Trying to ban any URL that contains "PROXY" - 4.Oct.2006 12:48:10 PM   
almighty1

 

Posts: 10
Joined: 13.Jun.2006
Status: offline
Yes I know its drastic but I know that it works effeciently. Ive tried setting up URLS sets with http://*proxy*Http://*.*proxy* but I still cant seem to ban it. Could anybody tell me what can I do?. Any help would be greatly appreciated.
Post #: 1
RE: Trying to ban any URL that contains "PROXY" - 4.Oct.2006 2:38:43 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
check this : http://www.isaserver.org/articles/2004domainnamesets.html

what u have to use is : *proxy.com / *proxy.net and so on.

i usually use domain name set, check the article.


Tarek

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to almighty1)
Post #: 2
RE: Trying to ban any URL that contains "PROXY" - 4.Oct.2006 2:56:31 PM   
almighty1

 

Posts: 10
Joined: 13.Jun.2006
Status: offline
Thanks elmajdal
I'll have a look down through that document. But basically I wish to block anything with PROXY in the url not just the domain.For exmaple I would like to ban all of the following using one rule (with wildcards) http://www.free.com/proxy.cgihttp://www.darkproxy.comhttp:/www.ansd.com/342cd/234fdf/proxy/3434/index.html

(in reply to elmajdal)
Post #: 3
RE: Trying to ban any URL that contains "PROXY" - 4.Oct.2006 3:47:54 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
have a look at this : http://isaserver.bm/destination_sets.html

they have an xml files that u can import into ur ISA .

and then u can simply add any website that is not included in these xml files.


Tarek

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to almighty1)
Post #: 4
RE: Trying to ban any URL that contains "PROXY" - 16.Oct.2006 12:38:29 PM   
almighty1

 

Posts: 10
Joined: 13.Jun.2006
Status: offline
Thanks dude, I do have an understanding of domain sets and URL sets. I have a comprehensive list I brought in from urlblacklist and I converted them to XML. But it still burns down to the wildcard issue.  Is there any way I can block all/any URL with the word "proxy" in it?. Please there must be some way.

(in reply to elmajdal)
Post #: 5
RE: Trying to ban any URL that contains "PROXY" - 16.Oct.2006 1:45:47 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

Is there any way I can block all/any URL with the word "proxy" in it?.

yes , blocking by signature.
this will block any url ( and might block any site) that has the word proxy.

Creat a new signature and include the word proxy in it.

HTH

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to almighty1)
Post #: 6
RE: Trying to ban any URL that contains "PROXY" - 17.Oct.2006 8:39:24 AM   
almighty1

 

Posts: 10
Joined: 13.Jun.2006
Status: offline
Thanks dude, thats exactly what I was looking for. Many thanks for your help.

(in reply to elmajdal)
Post #: 7
RE: Trying to ban any URL that contains "PROXY" - 9.Nov.2006 8:52:29 AM   
zachariah

 

Posts: 1
Joined: 9.Nov.2006
Status: offline
I've just registered on this forum to say a big THANK YOU to elmajdal for this tip, which is truly useful.

Why isn't the signature blocking method more widely known, eh?

(in reply to almighty1)
Post #: 8
RE: Trying to ban any URL that contains "PROXY" - 9.Nov.2006 9:45:41 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

Thanks dude, thats exactly what I was looking for.
 
Many thanks for your help.


hi almighty1,
Your are welcome.

quote:

  I've just registered on this forum to say a big THANK YOU to elmajdal for this tip, which is truly useful.



Hey zachariah,
come back always here
and Thanks for your kind words.

quote:

  Why isn't the signature blocking method more widely known, eh?



It IS !!!
http://www.isaserver.org/articles/2004blockp2pim.html

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to zachariah)
Post #: 9
RE: Trying to ban any URL that contains "PROXY" - 21.Nov.2006 11:20:29 AM   
jjones

 

Posts: 11
Joined: 21.Apr.2006
Status: offline
Great article. Thanks for sharing.

(in reply to almighty1)
Post #: 10
RE: Trying to ban any URL that contains "PROXY" - 13.Apr.2007 11:17:03 AM   
jjones

 

Posts: 11
Joined: 21.Apr.2006
Status: offline
Hi,
       Signatures work well to block a lot of proxy sites, however it does not catch all  (e.g. http://allaboutabe.com/history/index.php). Does a way exist to look within the header of a page using the HTTP filter and block the "script" or code that actually redirects a user to the page they desire to go to ?

Thanks


(in reply to almighty1)
Post #: 11

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> Trying to ban any URL that contains "PROXY" Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts