Hi, I've inherited a WinGate installed in our servers, in the users - system policies are ban list. I want to ban every access to internet excep a few webs, I've tried in the system policies , Right = Users can access services, Is granted to: USER - Ban List - Not Server name contains "server name"
If I've one server the policy works, it blocks everything except the one I wanted, but if add a second one it blocks everything. Ho can I block everything except 2 or 3 urls?
Update: I've been testing the advanced tab and it seems to work, is the right way to do it?
Ban list trouble
Moderator: Qbik Staff
4 posts
• Page 1 of 1
by ChrisH » Apr 27 06 8:19 am
wontolla wrote:Update: I've been testing the advanced tab and it seems to work, is the right way to do it?
That's where I would. As long as you have a separate Filter/Criterion for each site you want access to you should be OK.
Chris H.
- ChrisH
- WinGate Master
- Posts: 388
- Joined: Sep 13 03 1:38 am
- Location: Canada
by adrien » Apr 27 06 11:25 am
Hi
You can't currently use the banlist as a whitelist in WinGate.
although it's tempting to put in a bunch of criterion there, and use the "Not" option, what this does is basically block everything.
This is because the banlist works on an OR basis. If any of the criteria in the banlist are met, then the result is a ban.
So if for instance you put a single banlist criterion in which was "not server is microsoft", then that criterion would be true for any case where the server was not microsoft, and therefore ban all urls except for where the server was microsoft.
As soon as you added another one, say "not server is yahoo", then you've blocked everything, since the server won't be both microsoft and yahoo at the same time, therefore one or the other criteria will result in a block.
To implement a white-list in WinGate, you need to go to the advanced tab, and for each site you wish to allow, you need to create a new filter, with a criterion. This is because all the criteria in a filter are ANDed but the filters themselves are ORed. So, you would end up with something like
Filter 1
Server contains microsoft.com
Filter 2
Server contains yahoo.com
etc.
Not the easiest way to get a whitelist I know - we are working on an alternative option for the next major release.
Regards
Adrien
You can't currently use the banlist as a whitelist in WinGate.
although it's tempting to put in a bunch of criterion there, and use the "Not" option, what this does is basically block everything.
This is because the banlist works on an OR basis. If any of the criteria in the banlist are met, then the result is a ban.
So if for instance you put a single banlist criterion in which was "not server is microsoft", then that criterion would be true for any case where the server was not microsoft, and therefore ban all urls except for where the server was microsoft.
As soon as you added another one, say "not server is yahoo", then you've blocked everything, since the server won't be both microsoft and yahoo at the same time, therefore one or the other criteria will result in a block.
To implement a white-list in WinGate, you need to go to the advanced tab, and for each site you wish to allow, you need to create a new filter, with a criterion. This is because all the criteria in a filter are ANDed but the filters themselves are ORed. So, you would end up with something like
Filter 1
Server contains microsoft.com
Filter 2
Server contains yahoo.com
etc.
Not the easiest way to get a whitelist I know - we are working on an alternative option for the next major release.
Regards
Adrien
- adrien
- Qbik Staff
- Posts: 5448
- Joined: Sep 03 03 2:54 pm
- Location: Auckland
4 posts
• Page 1 of 1
Who is online
Users browsing this forum: No registered users and 5 guests