Francois,
I had the same problem with users and MP3 downloads. Follow the instructions
below, (they are from CP tech support) However, this will not block Napster.
Napster uses a their own proprietary protocol, so you have to get creative.
To keep people from going to Napster, I had to block the site entirely by
creating a Network Object and then workstation objects for every IP address
Napster resolves to ( I believe there are 8 sites), then entering the
workstation objects into the group. It is a nuisance, but it works. The rule
looks something like this....
Source-->MyLan Destination-->NapsterGroup Service-->Any Action-->Drop
To block MP3 downloads...
Try this exact syntax
How to block HTTP downloads
Fact: Firewall-1
Fact: HTTP Security Server
Fix: Create a HTTP resource as follows:
In the URI Definition window, "Match" tab:
Schemes: HTTP
Methods: GET
Host: *
Path: *.{ra,rm,ram,mov,asf,asx,wm,wma,wax,wvx,mp3}
Query: *
Include any desired extensions
Create a rule that uses this resource and denies access to anything
matching this resource (note this rule should show up before your rules
that allow general HTTP access):
Source Destination Service Action
Internal-Net Any http->resource Reject
The rule above also blocks Real Audio, Windows Media Player, and most
Streaming Audio and Video, although Real Player can be reconfigured to use
HTTP so that may still get through. As an FYI, you may also want to create
an FTP Resource that does the same thing. Users can get be pretty
resourceful if they have to......
Good Luck,
C-
-----Original Message-----
From: Fran�ois Georgy [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, June 21, 2000 7:39 AM
To: Fw-1-Mailinglist (E-mail)
Subject: [FW1] How to block MP3 download
Hi,
Is it possibel to block MP3 downloads with FW-1 ? If yes, how?
TIA
Fran�ois Georgy
System Manager
DSC - Communication Systems Department
Swiss Federal Institute of Technology Lausanne, EPFL
office: IN.R.112
phone: +41 (0)21 693 68 62
fax: +41 (0)21 693 47 10
email: [EMAIL PROTECTED]
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
