Switch to full style
Use this forum to post questions relating to WinGate, feature requests, technical or configuration problems
Post a reply

Blocking access to sites on that connects on IP

Sep 09 09 3:01 am

HI Guys

I am looking for some help here please. I would like to be able to block access to requests made by clients, to destinations specified by their
numeric IP address and not FQDN, AND using the 'Connect' method.

Kind Regards,

Jvrs

Re: Blocking access to sites on that connects on IP

Sep 09 09 2:38 pm

You can create policies based on the the clients IP address or the Server IP address on the WWW Proxy server Advanced policy configuration.

You can read more about creating WWW proxy policies in the KB here:

http://support.qbik.com/index.php?_m=kn ... 68&nav=0,2

Re: Blocking access to sites on that connects on IP

Sep 09 09 4:50 pm

Hi

there's currently no way to filter on these sorts of sites in WinGate 6. WinGate 7 can do it, since it has policy access to whether a servername is an IP or not.

In the meantime, are these connections going to port 443? You may be able to clamp down on that use by restricting the port numbers that the service will connect to using the CONNECT method.

Regards

Adrien

Re: Blocking access to sites on that connects on IP

Sep 09 09 7:13 pm

thanks for the replys guys
@jasona this method will not work as the destination IP's are unknown and change constantly.

@adrien yes these connections are going to port 443, how would I go by doing the clampdown ?

Thanks guys

Regards,

Jvrs

Re: Blocking access to sites on that connects on IP

Sep 09 09 7:18 pm

Hi

If they're all connecting to port 443 you can't really close that down, since it's used all the time for HTTPS.

You're welcome to try 7 if you like.

Adrien

Re: Blocking access to sites on that connects on IP

Sep 10 09 8:08 pm

I will be happy to try 7, what do I need to do to get it ?

Re: Blocking access to sites on that connects on IP

Sep 16 09 9:10 pm

Has Adrien contacted you about trying WinGate 7 yet? If not, drop us an email at support@qbik.com.

- Logan
Post a reply