Welcome to ISAserver.org

Blocking sites

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> General >> Blocking sites

Page: [1]

Message

<< Older Topic Newer Topic >>

Blocking sites - 12.Mar.2004 5:04:00 PM

Pressure

Posts: 32
Joined: 27.Jun.2001
From: Texas
Status: offline

I've got what SHOULD be a simple problem, but let's see:

I'm creating a Destination Set to block Spyware sites. I create it in the normal way, and enter the blocked addresses. I then ad this as a denied list in Site and Content Rules.

So far so good.

However, I notice that it is quite simple to get around the blocked sites.

For example, in the Destination set, if the blocked site is listed as www.badsite.com, then if the user types www.badsite.com (or clicks a hyperlink that is expressed in that way), then the site is indeed blocked, no problem.

HOWEVER, if the site is configured to respond to badsite.com (without the www or other identifier) then the block is NOT applied.

The only way I've come up with to get around this is to make BOTH entries into the Destination Sets list (i.e. *.badsite.com and badsite.com).

Is this the only way to make it work?

Post #: 1

Featured Links*

RE: Blocking sites - 13.Mar.2004 7:18:00 AM

papata

Posts: 84
Joined: 1.Feb.2004
From: London
Status: offline

You can just block 80 (packet fiter) or other ports aplying the filter to specified ip address or range (using in your isa web.log)
packet fiter:
custom
deny
tcp
local all
remote port 80 or else
aplies to address or range of addreses(network address/subnet)

(in reply to Pressure)