• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Are there anyway to block such header???

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> Are there anyway to block such header??? Page: [1]
Login
Message << Older Topic   Newer Topic >>
Are there anyway to block such header??? - 31.May2007 7:57:54 PM   
bbmak

 

Posts: 25
Joined: 17.Mar.2007
Status: offline
Hi:
I am wondering if there are ways to block such headers, exeem://  thunder://  ed2k://

Using ISA 2006 Enterprise
Post #: 1
RE: Are there anyway to block such header??? - 1.Jun.2007 9:58:58 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Yes, just create the signatures in your HTTP Security Filter for the rule.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to bbmak)
Post #: 2
RE: Are there anyway to block such header??? - 1.Jun.2007 10:09:04 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi,

Have a look at this article : http://www.isaserver.org/articles/2004blockp2pim.html

Tarek.

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to bbmak)
Post #: 3
RE: Are there anyway to block such header??? - 1.Jun.2007 4:06:55 PM   
bbmak

 

Posts: 25
Joined: 17.Mar.2007
Status: offline
For thunder://, it faked IE7 & Firefox's headers, User-Agent:, and it used these ports randomly, 80, 443, 1080, 8080, 3076-3078, 5200. What rule should I make to block this P2P software?

Should I change my web proxy to some other ports?  I am using 8080 ports for web proxy now.

If I block port 443, Is that mean i cannot use ssl??

Or should I just enter thunder:// in the header???

< Message edited by bbmak -- 1.Jun.2007 4:13:51 PM >

(in reply to elmajdal)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> Are there anyway to block such header??? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts