The only thing I know that would block this would be to have a "default closed" policy.
Create a "Deny Any/All" outbound filter, and then ahead of it add filters to allow: - PSN to perform DNS lookups (UDP 53) which they may be required to do in order to perform their jobs - PRO and/or PSN to access hosts on an "acceptable sites" list. Because you can only have 10 entries in an Address Object, you will probably need to "nest" Address Objects to keep from needing to add more than one filter. - PRO to access the PSN. Setting up a proxy server and using outbound filters to block all outbound traffic that doesn't come from the proxy server might also block this, but I can't make promises about that without trying. Mike Burden Lynk Systems http://www.lynk.com (616)532-4985 [EMAIL PROTECTED] -----Original Message----- From: Shayne Sales [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 11:25 AM To: Gb-Users (E-mail) Subject: RE: Safe Web Will GB block this Triangle Boy that have been developed to work around firewalls who are blocking out safeweb? Take a look https://fugu.safeweb.com/sjws/solutions/triangle_boy.html Obviously you could just restrict Internet access completely to that user(s) Shayne -----Original Message----- From: Jonas Haggren [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 7:57 AM To: Gb-Users (E-mail) Subject: Safe Web How can i block SafeWeb on the net??? I have tried to block the IP number.. https://www.safeweb.com/ /Jonas
