RE: ISA 2004 URL Sets mystery
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 15 Nov 2004 16:52:39 -0800
Don't do that; this is a web hosting company used by the BIG boys
(Google, Yahoo, MS, etc.).
Block this domain set and you drop about 10% of your valid web traffic.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-----Original Message-----
From: David Farinic [mailto:davidf@xxxxxxx]
Sent: Monday, November 15, 2004 1:00 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA 2004 URL Sets mystery
http://www.ISAserver.org
Can anybody try this on ISA 2004?
Create access rule for HTTP HTTPS which will block web access to
predefined URL Set containing record http://*.akadns.net
<http://*.akadns.net/> or *.akadns.net
Apply changes and then try to browse to not cached www.google.com
<http://www.google.com/> or www.yahoo.com <http://www.yahoo.com/>
And tell me if you pass through. In my test network *.akadns.net blocks
www.google.com <http://www.google.com/> . If I change it to
*.akadna.net its ok :-)
I tested this on 2 different ISA2004 boxes.
Thanx David Farinic
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
This mail was checked for viruses by GFI MailSecurity. GFI also develops
anti-spam software (GFI MailEssentials), a fax server (GFI FAXmaker),
and network security and management software (GFI LANguard) -
www.gfi.com
All mail to and from this domain is GFI-scanned.
Other related posts:
