On 12 July 2011 01:08, Andrew Cotter <[email protected]> wrote: > On Mon, Jul 11, 2011 at 12:52 PM, Luke Jaeger <[email protected]> wrote: >> >> I have a classroom where the teachers want the computers to have access to >> only our google docs domain docs.pvpa.org >> >> I created an alias 'myhosts' for all the computers in the classroom and an >> alias 'allowedSites' with the IP's of www.google.com and docs.pvpa.org. >> >> Set up firewall rules to block 'myhosts' from any host except >> 'allowedSites'. >> >> It works for www.google.com but not for our Google Apps domain. Any idea >> what's wrong with this picture or is there a better way to go about it? >> >> Luke Jaeger | Technology Coordinator >> Pioneer Valley Performing Arts Charter Public School >> www.pvpa.org >> >> > Luke, > Did you change the web address for docs in the management portal on Google > Docs under settings, docs, general? My guess is yes since you are using > that. > We did not modify this in our Google Apps deployment so the URL for us is > docs.google.com/a/domain.com. I am not sure if the user is really accessing > the docs from your docs.pvpa.org domain or if that is more for vanity and a > redirect is happening. What shows as a URL after you pull up a doc? > Did you try and add the IP for docs.google.com to your allowedSites list? > Andrew
Also, note that most large-scale web services typically use some form of HA or load balancing that may give you a different IP address each time you resolve the domain name. You'll have to add all the possible IP addresses to the allowedSites list. IMHO, this is an almost impossible task (what about the servers that Google uses to host static or user content? I'm pretty sure they are on different servers too) without sufficient knowledge of the network behind Google's services. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] Commercial support available - https://portal.pfsense.org
