Trouble with Ban List and Filter

[defiantclass1]

I have a group in the www proxy I called Restricted Users. In the "Included" section of the Time tab I have all the times these users have FULL access to the Internet. In the "Excluded" section I have the times that they have NO Internet access. This is currently working.

I want to add filters that will allow access to specific sites during the hours specified in the "Excluded" (NO Internet access) time section.

I have tried many many different settings in the Ban and Advanced sections, but have not been successful.

[ChrisH]

Try creating another policy for Restricted Users. This second policy would allow Restricted Users access to the sites you specify anytime. In this second policy in the advanced section create a filter for each URL you want to allow and check This criterion is met if for each one. WinGate will now look at both polices for Restricted User. If the first policy restricts a user because of time but the second allows user access, WinGate will grant access. It basically .OR.'s the policies. If either one grants access then access is given. This should work for you. Let us know how you make out.

[defiantclass1]

Thanks, I did what you suggested, but it does not appear to do the trick.

I now have 2 RestrictedUser groups. The first one has all the same settings as in my first set of remarks except there are no Ban or Advanced items.

The second has only a filter saying, for example, criteria is met if server name contains...... www.yahoo.com.

I go to the client workstation and there is no internet access at all (during my specified times)

[ChrisH]

I just set this up and it worked OK for me. Perhaps there is some other policy restricting them? What version Of WG are you using?

[defiantclass1]

I'm using 6.01.

Just installed it a week ago or so. I pretty sure the only policies I have set up are here in theis area. The thing that seems so strange to me is, the time portion works fine (access on and off through out the day).

Are both your "on" time and "off" times in the same group, or do you have "on" times in the first group and "off" times in the second group along with the "allowed" URLs?

Are you using "Server Name Equals", "Server Name Contains", or "HTTP URL"??

Thanks, I'll keep working on it. Probably something I'm over looking.

[ChrisH]

I'm using 5.2.3. Here's how I set up.

WWW Proxy Policies

System policies are ignored

Policy 1 - Restricted User

User must be authenticated
Time
- Included Every Day(All Day)
- Excluded Every Day from 17:00:00 to 18:00:00

Policy 2 - Restricted User

User must be authenticated
Advanced
- Filter1 - HTTP URL contains qbik
- Filter2 - HTTP URL contains dell

With this set up, user can only surf to Dell or Qbik sites during excluded time.

[defiantclass1]

Hello,

Yes, that worked! Thank you. But just to clarify, I need a different Filter for every web site I want to access?

Before (which is why it wasn't working) I set 1 filter with many site under it. For example:

Filter 1:
-HTTP URL contains "yahoo"
--HTTP URL contains "USPS"
---HTTP URL contains "google"

[ChrisH]

Yes, you are right. Each site needs to be on it's own Filter. If you put all sites under one filter, WinGate will logically .AND. all of them, and what would happen is that the condition could never be true and no access would be given (as you found out). WinGate will .OR. each Filter .So only one of the conditions has to be true for access to happen. Hope this helps.