• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Block specific IP addresses

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> Access Policies >> Block specific IP addresses Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
Block specific IP addresses - 11.Feb.2008 11:51:46 AM   
paleogryph

 

Posts: 9
Joined: 6.Feb.2006
Status: offline
I'm using ISA 2006 simply as a web proxy.  I'm also using blocked domain and url filters that work great.

Lately I've noticed large amounts of traffic from internet ip's that all come from the same european ISP.  And the traffic comes in on ports 7000, 8004 or 8050.  It turns out to be "SHOUTcast D.N.A.S." servers users are streaming music from.  We had a dust up about streaming a while back and I've been blocking domains and urls that point to streaming servers.  However with these recent ones, adding their url and domains to blocked lists hasn't worked.

So I made a "Blocked IPs" access rule that denies all traffic from the internal network to the Blocked IPs computer set.  It doesn't seem to work either.  I've deleted the access rule and the computer set and recreated them a few times with the same results.  Currently I'm blocking access to those sites on my HWFW.  I thought it would be interesting to know how to do this on ISA.

A while back I tried blocking streamed media on ISA with some how-to's I found on this and other sites.  They worked too good, they blocked some internal sites we use and caused other problems.  I may take another look at that, but I thought it would be easy to just block access to the IPs of these shoutcast servers.

What am I doing wrong?
Post #: 1
RE: Block specific IP addresses - 13.Feb.2008 3:39:54 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
give us an example so that we can investigate.



_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to paleogryph)
Post #: 2
RE: Block specific IP addresses - 13.Feb.2008 6:34:02 PM   
paleogryph

 

Posts: 9
Joined: 6.Feb.2006
Status: offline
An Example of the Shoutcast servers?
Here are a few:
209.9.238.10
208.83.20.99
87.117.196.7
213.186.41.149
87.117.228.18
208.83.20.13
208.122.36.14
208.53.158.71

(in reply to elmajdal)
Post #: 3
RE: Block specific orkut on searching critaria - 23.Feb.2008 5:15:30 AM   
sadiq.mcp

 

Posts: 11
Joined: 23.Feb.2008
Status: offline
Hi
 Sir,  i want to Block specific word on searching critaria.. for example users type "orkut" on google.com etc.searching critaria. isa server deny this keyword "ORKUT"... how can i do???? please help me....

im using isa 2004

Thanks
Best Regards
Sadiq.Fazal

_____________________________

Sadiq.Fazal
DC Administrator

(in reply to elmajdal)
Post #: 4
RE: Block specific orkut on searching critaria - 23.Feb.2008 5:53:39 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

 Sir,  i want to Block specific word on searching critaria.. for example users type "orkut" on google.com etc.searching critaria. isa server deny this keyword "ORKUT"... how can i do???? please help me....

im using isa 2004



Hi,

Check my article : Keyword Filtering With ISA Server 2006

HTH,
Tarek

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to sadiq.mcp)
Post #: 5
RE: Block specific IP addresses - 23.Feb.2008 5:55:37 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

ORIGINAL: paleogryph

An Example of the Shoutcast servers?
Here are a few:
209.9.238.10
208.83.20.99
87.117.196.7
213.186.41.149
87.117.228.18
208.83.20.13
208.122.36.14
208.53.158.71


Why not create a Computer List and add all these IPs to it and create a deny rule for this Computer List.

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to paleogryph)
Post #: 6
RE: Block specific orkut on searching critaria - 23.Feb.2008 6:44:10 AM   
sadiq.mcp

 

Posts: 11
Joined: 23.Feb.2008
Status: offline
Sir; Thank you very much ,,,,

(in reply to elmajdal)
Post #: 7
RE: Block specific orkut on searching critaria - 23.Feb.2008 9:15:47 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

ORIGINAL: sadiq.mcp

Sir; Thank you very much ,,,,


Glad to help, and thanks for the follow up.

Tarek

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to sadiq.mcp)
Post #: 8
RE: Block specific orkut on searching critaria - 10.Jul.2008 9:54:26 AM   
sadiq.mcp

 

Posts: 11
Joined: 23.Feb.2008
Status: offline
Hi    again please i mis keyword article please 

i want to recheck your best article please send me on sadiq.fazal@gmail.com or in forum please sir i request you. thanks
Sadiq fazal 

Check my article : Keyword Filtering With ISA Server 2006

HTH,
Tarek 
this is my question;
Sir,  i want to Block specific word on searching critaria.. for example users type "orkut" on google.com etc.searching critaria. isa server deny this keyword "ORKUT"... how can i do???? please help me....

im using isa 2004

Thanks
Best Regards
Sadiq.Fazal

_____________________________

Sadiq.Fazal

(in reply to elmajdal)
Post #: 9
RE: Block specific orkut on searching critaria - 10.Jul.2008 5:55:11 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi Sadiq,

What are you asking for ?

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to sadiq.mcp)
Post #: 10
RE: Block specific orkut on searching critaria - 11.Jul.2008 9:24:26 AM   
sadiq.mcp

 

Posts: 11
Joined: 23.Feb.2008
Status: offline
sir i hope you are fine.
problem is when i click your article which was you post me since feb 2008. i received ERROR msge :
i think your article is moved from this link ok error is
Keyword Filtering With ISA Server 2006 (your article link)
Server Error in '/' Application.



The resource cannot be found.
Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable.  Please review the following URL and make sure that it is spelled correctly.

Requested URL: /ISAServer/index.aspx



Sadiq.Fazal

(in reply to elmajdal)
Post #: 11
RE: Block specific orkut on searching critaria - 11.Jul.2008 9:29:22 AM   
sadiq.mcp

 

Posts: 11
Joined: 23.Feb.2008
Status: offline
Hi Sir
i hope you are fine, i have 4 mb bandwidth and i want to distribute to my users. for example in tomorrow my every user use only fixed 80 KB downloading speed, not 1 mb  or 60 kb only "80 kb" downloading speed. how can i do???? do you have any solution.
i am waiting


Sadiq Fazal

< Message edited by sadiq.mcp -- 11.Jul.2008 10:07:24 AM >

(in reply to elmajdal)
Post #: 12
RE: Block specific orkut on searching critaria - 11.Jul.2008 6:26:45 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi,

Here is the link for the requested article : http://www.elmajdal.net/ISAServer/Keyword_Filtering_With_ISA_Server_2006.aspx



_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to sadiq.mcp)
Post #: 13
RE: Block specific orkut on searching critaria - 11.Jul.2008 6:29:23 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

ORIGINAL: sadiq.mcp

Hi Sir
i hope you are fine, i have 4 mb bandwidth and i want to distribute to my users. for example in tomorrow my every user use only fixed 80 KB downloading speed, not 1 mb  or 60 kb only "80 kb" downloading speed. how can i do???? do you have any solution.
i am waiting


Sadiq Fazal


So you want to control the bandwidth and distribute it .

Then user Bandwidth Splitter : www.bsplitter.com


_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to sadiq.mcp)
Post #: 14
RE: Block specific orkut on searching critaria - 12.Jul.2008 5:41:12 AM   
sadiq.mcp

 

Posts: 11
Joined: 23.Feb.2008
Status: offline
thank you very much

(in reply to elmajdal)
Post #: 15
RE: Block specific orkut on searching critaria - 12.Jul.2008 5:45:02 AM   
sadiq.mcp

 

Posts: 11
Joined: 23.Feb.2008
Status: offline
quote:

ORIGINAL: sadiq.mcp

Hi Sir
i hope you are fine, i have 4 mb bandwidth and i want to distribute to my users. for example in tomorrow my every user use only fixed 80 KB downloading speed, not 1 mb  or 60 kb only "80 kb" downloading speed. how can i do???? do you have any solution.
i am waiting


Sadiq Fazal



So you want to control the bandwidth and distribute it .

Then user Bandwidth Splitter : www.bsplitter.com


_____________________________

bsplitter is good but i want to manage with isa server rule, do you give me any article about managing bandwidth with isa server 2004 no third party tool.


Sadiq Fazal

(in reply to elmajdal)
Post #: 16
RE: Block specific orkut on searching critaria - 12.Jul.2008 8:08:06 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
ISA Server 2004 / 2006 do not have a built in feature to control Bandwidth.

HTH,
Tarek

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to sadiq.mcp)
Post #: 17
RE: Block specific orkut on searching critaria - 14.Jul.2008 7:30:18 AM   
sadiq.mcp

 

Posts: 11
Joined: 23.Feb.2008
Status: offline
ok thanks.. again

(in reply to elmajdal)
Post #: 18
RE: Block specific orkut on searching critaria - 14.Jul.2008 9:22:54 AM   
mzakir

 

Posts: 151
Joined: 2.Apr.2007
Status: offline
Sadik,

Bandwidth splitter is good one, you can try it, I have used the same (trail version)

< Message edited by mzakir -- 14.Jul.2008 9:24:15 AM >


_____________________________

Malek Zakir
MCP,MCSA:Security,MCSA:Messaging,MCTS,CCNA,DCH

(in reply to sadiq.mcp)
Post #: 19
RE: Block specific orkut on searching critaria - 14.Jul.2008 10:44:30 AM   
sadiq.mcp

 

Posts: 11
Joined: 23.Feb.2008
Status: offline
ok zakir bhai.

tomorrow i will try.

Thanks for reply
Sadiq.Fazal

(in reply to mzakir)
Post #: 20

Page:   [1] 2   next >   >> << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> Access Policies >> Block specific IP addresses Page: [1] 2   next >   >>
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts