[FW-1] URL Screening with external Proxy

[Klaus Gribi <klaus.gribi@FW1-NOSPAMCLOUNET.CH>]

Hi all

I'm using a CP FW 4.1 SP5 on NT 4.0 SP 6a. The following network layout is
in place:

Intranet --- My Firewall --- Proxy Server --- Other Firewall --- Internet

The Web Browser client in the Intranet connects via the proxy on port 8080
to the Internet. Everything is working fine.

Now, I should block a special Web Site (www..ch). On "My Firewall" I
created
the following rule before the proxy rule:

Source "Intranet", Destination "Proxy Server", Service "tcp8080->badweb",
Action "Reject"

Resource:
Name: badweb
Connection Methods: Proxy
URI Match: WildCards
Schemes: http
Methods: get, post, head, put
Host: www..ch
Path: *
Query: *
Replacemnet Uri: Intranet-Site
HTML Weeding: nothing selected
Response Scanning: nothing selected
CVP Server: none

Well all Proxy connections are then rejected instead of only www.xxx.ch.
Tried to replace
service "tcp8080" with "http->badweb" with the same result.

Any? Thanks.

Regards
Klaus

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================