• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

About "Restrict access to some sites"

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> About "Restrict access to some sites" Page: [1]
Login
Message << Older Topic   Newer Topic >>
About "Restrict access to some sites" - 15.Feb.2004 2:31:00 AM   
cnetrab

 

Posts: 8
Joined: 15.Feb.2004
Status: offline
I have a problem.This is:In my network,there is a DNS Server--"Srv_dns1" .Every "dns" is sent to it in my network.And all "external dns" is sent to a external DNS Server by my DNS Server--"Srv_dns1". Thus when i want to Restrict access to some sites by URL_set,my isa2004 server work wrong.But when i want to Restrict access to some sites by ip(such as:http://10.10.10.10/),it works right.
What can i do to Restrict access to some sites by URL_set(such as:http://www.xxx.com/path)?
I am a chinese,and i am sorry my poor English!
Post #: 1
RE: About "Restrict access to some sites" - 15.Feb.2004 2:41:00 AM   
cnetrab

 

Posts: 8
Joined: 15.Feb.2004
Status: offline
I just found that Web proxy works right,But SecureNat works wrong!

(in reply to cnetrab)
Post #: 2
RE: About "Restrict access to some sites" - 15.Feb.2004 6:28:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Cne,

So the SecureNAT clients are not blocked, but the Web Proxy clients are blocked?

Thanks!
Tom

(in reply to cnetrab)
Post #: 3
RE: About "Restrict access to some sites" - 16.Feb.2004 12:04:00 AM   
cnetrab

 

Posts: 8
Joined: 15.Feb.2004
Status: offline
Yes!

(in reply to cnetrab)
Post #: 4
RE: About "Restrict access to some sites" - 16.Feb.2004 12:14:00 AM   
cnetrab

 

Posts: 8
Joined: 15.Feb.2004
Status: offline
Hi,
In my network ,there is a ISA2000 server and a ISA2004 server. The ISA2000 server works correcttly, but ISA2004 server works uncorrecttly.

(in reply to cnetrab)
Post #: 5
RE: About "Restrict access to some sites" - 16.Feb.2004 5:35:00 AM   
zhangmeibo

 

Posts: 87
Joined: 11.Feb.2004
From: China
Status: offline
hi , cnetrab

You can create a access rule to block it.

(in reply to cnetrab)
Post #: 6
RE: About "Restrict access to some sites" - 16.Feb.2004 7:28:00 AM   
cnetrab

 

Posts: 8
Joined: 15.Feb.2004
Status: offline
Thanx!
But how can i do it?
All DNS(to outbound) is snet by my DNS server not the client computer. I want to block some computer, and let the other computer to out!

(in reply to cnetrab)
Post #: 7
RE: About "Restrict access to some sites" - 16.Feb.2004 12:47:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi CNE,

At this time, the only way for HTTP requests to be blocked on a per site basis is to configure them as Web Proxy clients. I'm checking to see if there is a work around.

Stephen Pouselle's article gives you some insight on this problem:
http://www.isaserver.org/tutorials/The_Mystery_of_the_HTTP_Redirector_and_SiteContent_Rules.html

HTH,
Tom

(in reply to cnetrab)
Post #: 8
RE: About "Restrict access to some sites" - 17.Feb.2004 12:42:00 AM   
cnetrab

 

Posts: 8
Joined: 15.Feb.2004
Status: offline
Thanks, Tom
I'll read it. Maybe i will ask some question to you later.
Thanks again.

Cnetrab

(in reply to cnetrab)
Post #: 9
RE: About "Restrict access to some sites" - 17.Feb.2004 12:54:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Cnetrab,

I'm hoping to get an answer to this soon. I'll let you know when I find out.

Thanks!
Tom

(in reply to cnetrab)
Post #: 10
RE: About "Restrict access to some sites" - 17.Feb.2004 1:48:00 AM   
cnetrab

 

Posts: 8
Joined: 15.Feb.2004
Status: offline
Hi,Tom
Maybe i have found the problem. Like the articles " Configuring the HTTP Redirector " by Curt Simmons. In ISA2000, there is a "HTTP Redirector Filter Properties" ,this can redirects all HTTP requests from firewall and SecureNAT clients to the Web Proxy Service on the local ISA Server computer. But in ISA2004, there are a "HTTP Filter" and a "WEB Proxy Filter". How can i REDIRECTOR the "HTTP Filter" to "WEB Proxy Filter".

Thanks
Cnetrab

(in reply to cnetrab)
Post #: 11
RE: About "Restrict access to some sites" - 17.Feb.2004 12:04:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Cnetrab,

Exactly! That is what I'm trying to figure out.

I'll keep you updated.

Thanks!
Tom

(in reply to cnetrab)
Post #: 12

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> About "Restrict access to some sites" Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts