Ban List Configuration Question

[DrWho]

I've been using the ban list for a WWW user very successfully with WinGate 6. In principle, this question should be easy to implement, but I haven't been able to discover the answer:

I would like to ban any URLs containing 'xxx' (obviously), but I would like to permit visits to http://xxx.lanl.gov/ (a great physics resource site).

How can I do this? I've tried combinations of 'Conditions are met if:' plus 'Conditions are not met if:', and I've tried creating advanced filter rules but haven't hit on the right combination.

Thanks.

[jasona]

You can be able to do this by creating a new policy that specifically allows access to this site. This will override the blacklist for that particular site.

1-GateKeeper >> Services Tab >> WWW Proxy server
2-Policies
3-"Add"
4-Advanced Tab
5-"Specify which requests ..."
6- "Add filter"
7-"Add Criterion"
8-This criterion is met if "http URL" "contains" "xxx.lanl.gov"
9- OK out and save

[DrWho]

jasona,

You would think that 'Advanced...Filter...Criterion' would work in the manner you describe, but it doesn't. I tried this before and retried it following your directions just to make sure. Here's what happens:

1. With xxx blocked by the ban 'URL contains xxx'' and adding the filter and criterion you describe, causes ALL http requests to be blocked except to xxx.lanl.gov

2. I even tried 'not met' in place of 'met' in your instructions. In this case, normal http requests go through, but xxx.lanl.gov is still blocked.

Another suggestion, please....

Thanks

[ChrisH]

Hello, I would suggest creating two separate policies for the particular group or user. One would be the "black" list, the other the "white" list. So, the black list is the one where you list sites you want to be banned using the Ban List Tab as you have done - include no Advanced items. The second policy for the user or group would have the same authentication requirements and time settings but no Ban List entries. In the Advanced section add your white list sites each with a separate filter as jasona stated. WG will logically OR the two policies. If one policy denies but the other grants rights then the right will be granted. Let us know if this helps.

[DrWho]

Chris,

Fantastic! This works great. I've been wanting to create a white list for some time but couldn't figure out how to do it.

Thanks again.