• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

UrlSet vs signature

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> UrlSet vs signature Page: [1]
Login
Message << Older Topic   Newer Topic >>
UrlSet vs signature - 11.Nov.2004 12:47:00 PM   
y0sh1

 

Posts: 25
Joined: 14.Sep.2004
Status: offline
Hi all!

1.There are a bad site - xxx.com (it resolve with www.xxx.com too) I created DomainNameSet *.xxx.com and denied rule for this set. Now i can't go on www.xxx.com but i still can go on xxx.com What is wrong!? When i create two records in DomainNameSet - *.xxx.com and xxx.com - all ok! Why?

2. I have a bad string - zzz. I want all users can't go on site with name that have this string. I can't create DomainNameSet with record *zzz* right? What i can to do? As far as I understand i may create signature with "search in request url" zzz to block http request to this site?

Thx advance.
Post #: 1
RE: UrlSet vs signature - 15.Nov.2004 12:46:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Yoshi,

1. You need to create a second one for www.com

2. You can create a search string and block all URL with that string.

HTH,
Tom

(in reply to y0sh1)
Post #: 2
RE: UrlSet vs signature - 17.Nov.2004 9:41:00 AM   
y0sh1

 

Posts: 25
Joined: 14.Sep.2004
Status: offline
Hi Tom! Big thanks for replay!

1. ok, i understand. In that way if i have much url records in my UrlDomaneName i must duplicate all of them? [Frown]
2. In that way if i have more than one rule with HTTP protocol i must write my signature in all of them? Or create first rule with block this signature? It is a pity that there are no SignatureSets for the centralized management. [Frown]

(in reply to y0sh1)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> UrlSet vs signature Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts