[FW-1] HTTP with resource

[Jim Parker <jim@FW1-NOSPAMJIMPARKER.CO.UK>]

Is the following a bug, or a feature?

I set up a rule, any - any - 'http with resource' - reject to filter blocked
URI's with websense.
I have 'transparent' checked but not 'proxy' as I don't want to use the
proxy feature.
The next rule allows http so that all sites accepted by websense db get
allowed through.

When i set the firewall as my default gateway and open up a browser, and go
to playboy.com the page is blocked so the rule is working, I try google.com
and get out so ok - working.

Now, if i set the fw port 80 as my proxy in the browser and try playboy.com
again I get straight out onto the net. bypassing websense because proxy
wasn't checked and therefore doesn't match the rule.

Surely not checking 'proxy' should mean don't act as a proxy???

Your thoughts gents.
JP

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================