How does the Ban List works for user with multiple group?

[ahkow]

Hi, I am running WinGate 6.2.2 Server in a Windows 98.

Trying to understand how Ban List works in WWW Proxy.

For example:
-John belongs to Group1
-Mary belongs to Group1 & Group2

In "WWW Proxy"
-Group1 is banned to access url containing "facebook"
-Group2 is banned to access url containing "twitter"

John cannot access facebook, but can access twitter, which is what I want.
But Mary can access both, which is not what I want.
What I want is Mary cannot access both facebook and twitter.
How to do that?
Thanks.

[logan]

Because Mary is a member of Group 1, and the policy for Group 1 only blocks facebook (not twitter) then Mary will be able to access twitter. The rule of thumb here is that WinGate 6 policies are 'granting' policies, in that only 1 policy must grant access for the user to have access. To block a user from accessing a certain website, no policies should be granting that user access.

In your case, try taking Mary out of Group 1 and add an extra criterion to the Group 2 policy that blocks facebook as well. Since Mary is not in Group 1, the group 1 policy will not grant access, and the group 2 policy blocks access to both facebook and twitter.

[ahkow]

Ok, thanks!