RE: URL blocking issue
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Sat, 11 Dec 2004 08:59:21 -0800
Examine the logs.
Not everything on ebay is served by ebay.
Like many large websites, they actually get served via web hosting
companies like Akamai who maintain web farms to spread the load across
literally hundreds of web servers.
The ISA Monitoring, Logs tab allows you to follow this traffic as it
happens, or after the fact by creating query filters to filter out the
junk you're not interested in.
Use the force, Luke...
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-----Original Message-----
From: Ara [mailto:ara@xxxxxxxxxx]
Sent: Friday, December 10, 2004 2:28 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: URL blocking issue
http://www.ISAserver.org
Hello
Thanks for reply. I tried this but actually got worse and totally allow
page
access. I thought *.ebay.*/* should cover it all including sub domains,
domain type and subfolders but no.
Thank you
> -----Original Message-----
> From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
> Sent: December 10, 2004 5:09 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: URL blocking issue
>
> http://www.ISAserver.org
>
> Asterick on each side, like *.ebay* and *ebay.*?
>
> John Tolmachoff
> Engineer/Consultant/Owner
> eServices For You
>
>
> > -----Original Message-----
> > From: Ara [mailto:ara@xxxxxxxxxx]
> > Sent: Friday, December 10, 2004 1:55 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] URL blocking issue
> >
> > http://www.ISAserver.org
> >
> > Hello
> > This is a simple task but making me nuts. I wanted to block any
access
> to
> > eBay site. Following article posted on Microsoft site
> >
> http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/faq-
> urldomainname
> > sets.mspx I have created these 2 destination sets and made a deny
rule
> on
> > top priority in list
> >
> > *.eBay >>> to block any sub domain of eBay
> > EBay.* >>> to block any country related domain like .ca or .at
> >
> > Now if I type the link directly I get the proper deny page, but
users
> came
> > smart and search on Google for word eBay and in that case they can
> bypass
> it
> > clicking on links Google provides. Using that method they get to
site
> but
> > some windows inside the site contain the block message while others
let
> you
> > browse !!!
> >
> > Would someone correct me if I have made a mistake on destination set
or
> > rule? I can forward a screen shot of how it looks to personal mail
for
> > better understanding it.
> >
> > Thank you
> >
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List
as:
> > johnlist@xxxxxxxxxxxxxxxxxxx
> > To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> ara@xxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
Other related posts:
