.dll exclusion

[n0ticer]

i have a rule for Staff Group in my WWW Proxy server service to block HTTP URL ends with ".dll".

is there a way to exclude these links?...

http://codecs.microsoft.com/isapi.ocget.dll
http://activex.microsoft.com/objects/ocget.dll

or how do i prevent it from being blocked?

tnx

[Pascal]

You should be able to do this with a series of filters and criterion. I think if you say:

Filter1 -
Criterion 1 - This right is not granted if http URL ends with ".dll"
Criterion 2 - This right is not granted if http URL is not <full url>

Or something to that effect. I don't have WinGate in front of me, so might not have the accurate text there.

[n0ticer]

tnx pascal,

but, still gets blocked. any accurate text pls? :)

[Pascal]

Filter 1:
Not HTTP URL ends with ".dll"

That filter denies access to anything that ends on .dll.

Filter 2:
HTTP URL equals "http://activex.microsoft.com/objects/ocget.dll"

That filter allows access to the specific DLL. The other DLL link you posted doesn't exist, but you'd need to add that as an additional filter + criterion. Remember, criterion are ANDd and filters are ORd.

[n0ticer]

pascal,

i did everything u've suggested, it gets blocked. the blocking happens when attaching file using yahoo mail.

http://codecs.microsoft.com/isapi/ocget.dll
http://activex.microsoft.com/objects/ocget.dll

my setup is based on this:
http://forums.qbik.com/viewtopic.php?t= ... ight=given

but adding another policy doesnt do the trick.

tnx

[Pascal]

Not another policy - another filter+criterion. Can you send me the appropriate section from your registry, please ?

[adrien]

actually... another policy will do the trick.

If you add a policy, which only grants access to either of those two links, then access to these links will always be granted.

To do an "either" concept, you would need to add a policy, as Pascal says, but with the advanced rules with 2 filters, each with one criterion.

Each of those filters are considered in parallel (ORed together), and the criteria under each filter are ANDed together.

Adrien

[Pascal]

Here's the problem - you're adding them to the ban list. That's not quite going to work. You need to use Filters + Criterion (Advanced options) to get that working because you are trying to combine the two operations. That was the test case I used.