Needed: Block all URLs on Black List except domains on White List for  
workstations going through transparent proxy.

I'm new to EFW but have used IPCop/WrapCop/EmbCop for years. I like  
the packages in EFW 2.1.2 but am having problems using transparent  
proxy and content filter:

Block ALL URLs except those on white list to IP/MAC/subnets not  
excluded in Proxy.

I add list of domains to white list, ** to blacklist and enable  
logging on the content filter page.
On Proxy page, Contentfilter is enabled and IP forwarding is also  
enabled.
Cache is cleared and proxy restarted.

(Marco - I had similar problems with AdvProxy 2.1.5 /URL filter upon  
Wrapcop upgrade to 1.4.16)

Dansguardian says "I seem to be running already!" but everything is  
allowed to pass through to the restricted workstations.

Partial solution is to turn on all filters as white list IS WORKING  
and try to block everything else by checking everything plus dropping  
max score to 1 and turning on PICS.

If Adv Proxy accepts domains and not just IPs in NAC's "Destinations  
to which bypass transparent proxy" I could add white list here and  
block everything with time controls. But I think FQDNs are not  
permitted here, only IPs or subnets.

The internal network has all MS workstations using basic "User"  
privileges with Privilege Manager taking care of elevating a process  
as required. Full access to internet browsing is reserved to an  
Ubuntu desktop specifically set up for this purpose. I'm only after  
restricting access to the net for purposes of productivity for the  
group of workstations going through the proxy.

Suggestions welcomed!!  Thank you.






  

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to