Loading...

efw-user@lists.sourceforge.net

[Prev] Thread [Next]  |  [Prev] Date [Next]

Re: [Efw-user] Outgoing Firewall and HTTP Proxy Lee Marzke Mon Nov 01 22:00:07 2010

You can try   http proxy, configuration,   bypass transparent proxy
[Bypass transparent proxy TO subnet/IP ]

If the FW blocks all traffic and the transparent proxy is not used, the site should be blocked.

Lee

 On 10/31/2010 03:06 PM, Elmar Natter wrote:
Thanks for this Information, but how to prevent http proxy users from accessing several IPs or IP Ranges? As far as I know only blocking of URLs are possible. Am I right?

Elmar


2010/10/28 Lee Marzke <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>

    On 10/28/2010 09:18 AM, Elmar Natter wrote:

        Hello,

        today I've encountred a strange problem. I've blocked thru
        Outgoing
        Firewall (means<ANY>  to<Specific IP's) DENY). This works
        perfectly as
        long i don't use the transparent proxy. If I enable
        transparent Proxy,
        Users a able to browse the Sites behind the blocked IPs. For
        me it's
        looking like the Endian IP is able to browse this IP's and
        also squid is
        able ti access them. As the transparent Proxy is able to
        access, user
        using this are able to. Can this be right and how to prevent the
        Proxy-Users from Accessing?

        Regards!


    Outbound access is via one of two paths:

    - through the outbound firewall     -or-
    - http proxy

    So,  yes firewall rules are not used by the proxy.   You have to
    use proxy rules.
    With a proxy, you typically block by using content filters , not
    individual sites,  but
    you can also blacklist a site if needed.

    Lee

-- "Between subtle shading and the absence of light lies the nuance
    of iqlusion..."  - Kryptos

    Lee Marzke, [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
    http://marzke.net/lee/


    
------------------------------------------------------------------------------
    Nokia and AT&T present the 2010 Calling All Innovators-North
    America contest
    Create new apps & games for the Nokia N8 for consumers in  U.S.
    and Canada
    $10 million total in prizes - $4M cash, 500 devices, nearly $6M in
    marketing
    Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi
    Store
    http://p.sf.net/sfu/nokia-dev2dev
    _______________________________________________
    Efw-user mailing list
    [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
    https://lists.sourceforge.net/lists/listinfo/efw-user



------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps&  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
http://p.sf.net/sfu/nokia-dev2dev


_______________________________________________
Efw-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/efw-user


--
"Between subtle shading and the absence of light lies the nuance of 
iqlusion..."  - Kryptos

Lee Marzke,     [EMAIL PROTECTED]                              
http://marzke.net/lee/
IT Consultant, Global App Development, Sofware CM, VMware, VSphere, NetApp 
storage
voice: +1 484-961-0369     +1 800 393 5217                     sip://[EMAIL 
PROTECTED]
fax:  +1 484-348-2230


------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Efw-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/efw-user