Hello Lee,
yes that works indeed. But this means that the transparent proxy passes all
filtered traffic from outgoing fw over known ports out. I guess most of the
people don't recognize this.
Regards from germany
Elmar
2010/11/2 Lee Marzke <l...@marzke.net>
> You can try http proxy, configuration, bypass transparent proxy
> [Bypass transparent proxy TO subnet/IP ]
>
> If the FW blocks all traffic and the transparent proxy is not used, the
> site should be blocked.
>
> Lee
>
>
> On 10/31/2010 03:06 PM, Elmar Natter wrote:
>
> Thanks for this Information, but how to prevent http proxy users from
> accessing several IPs or IP Ranges? As far as I know only blocking of URLs
> are possible. Am I right?
>
> Elmar
>
>
> 2010/10/28 Lee Marzke <l...@marzke.net>
>
>> On 10/28/2010 09:18 AM, Elmar Natter wrote:
>>
>>> Hello,
>>>
>>> today I've encountred a strange problem. I've blocked thru Outgoing
>>> Firewall (means<ANY> to<Specific IP's) DENY). This works perfectly as
>>> long i don't use the transparent proxy. If I enable transparent Proxy,
>>> Users a able to browse the Sites behind the blocked IPs. For me it's
>>> looking like the Endian IP is able to browse this IP's and also squid is
>>> able ti access them. As the transparent Proxy is able to access, user
>>> using this are able to. Can this be right and how to prevent the
>>> Proxy-Users from Accessing?
>>>
>>> Regards!
>>>
>>>
>>
>> Outbound access is via one of two paths:
>>
>> - through the outbound firewall -or-
>> - http proxy
>>
>> So, yes firewall rules are not used by the proxy. You have to use proxy
>> rules.
>> With a proxy, you typically block by using content filters , not
>> individual sites, but
>> you can also blacklist a site if needed.
>>
>> Lee
>>
>> --
>> "Between subtle shading and the absence of light lies the nuance of
>> iqlusion..." - Kryptos
>>
>> Lee Marzke, l...@marzke.net
>> http://marzke.net/lee/
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Nokia and AT&T present the 2010 Calling All Innovators-North America
>> contest
>> Create new apps & games for the Nokia N8 for consumers in U.S. and Canada
>> $10 million total in prizes - $4M cash, 500 devices, nearly $6M in
>> marketing
>> Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
>> http://p.sf.net/sfu/nokia-dev2dev
>> _______________________________________________
>> Efw-user mailing list
>> Efw-user@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/efw-user
>>
>>
>
> ------------------------------------------------------------------------------
> Nokia and AT&T present the 2010 Calling All Innovators-North America contest
> Create new apps & games for the Nokia N8 for consumers in U.S. and Canada
> $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
> Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
> http://p.sf.net/sfu/nokia-dev2dev
>
>
> _______________________________________________
> Efw-user mailing
> listefw-u...@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/efw-user
>
>
>
> --
> "Between subtle shading and the absence of light lies the nuance of
> iqlusion..." - Kryptos
>
> Lee Marzke, l...@marzke.net
> http://marzke.net/lee/
>
> IT Consultant, Global App Development, Sofware CM, VMware, VSphere, NetApp
> storage
> voice: +1 484-961-0369 +1 800 393 5217
> sip://l...@4aero.com
> fax: +1 484-348-2230
>
>
>
>
> ------------------------------------------------------------------------------
> Nokia and AT&T present the 2010 Calling All Innovators-North America
> contest
> Create new apps & games for the Nokia N8 for consumers in U.S. and Canada
> $10 million total in prizes - $4M cash, 500 devices, nearly $6M in
> marketing
> Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
> http://p.sf.net/sfu/nokia-dev2dev
> _______________________________________________
> Efw-user mailing list
> Efw-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/efw-user
>
>
------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user
