[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Blocking web sites



In my experience it is usually easier to block sites on your proxy server than
the firewall, particularly given the seeming endless problems with Checkpoint
security servers.  If you are not using a proxy, why not? There are many
reasons why you should be :-)

Damo


>If you have an internal DNS server, I highly recommend creating an empty
>zone for each domain, thus preventing name resolution.  It works great for
>me...  If you don't, you should get one.  :)
>
>Russ Cooper (of NTBugTraq) posted the list of domains on Sunday (the
>archived message can now be found at
>http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0211&L=ntbugtraq&F=P
>&S=&P=961), which I've modified by removing the 'www' host name:
>
>friend-g"RemoveThis"reeting.com
>friend-g"RemoveThis"reeting.net
>friend-c"RemoveThis"ards.net
>friendg"RemoveThis"reetings.com
>friend-g"RemoveThis"reetings.com
>friend-g"RemoveThis"reetings.net
>cool-d"RemoveThis"ownloads.net
>
>The string "RemoveThis" is not part of the real url.
>
>This is probably no longer (or perhaps never was) a complete list...
>
>Best Regards,
>
>Christian deLarios
>Network Security Engineer
>Intuit, Inc.
>
>-----Original Message-----
>From: RBHATIA [mailto:[email protected]]
>Sent: Wednesday, November 13, 2002 10:08 AM
>To: [email protected]
>Subject: [FW-1] Blocking web sites
>
>
>I'm trying to block all these menacing free-greetings.com URL's due to the
>virus problems. Can anyone give me a full list of these ? Also, how can I
>block these at the firewall ? I was trying to create destination objects of
>DOMAIN using each of these URL's. Is this the right way to do it ?
>
>=================================================
>To set vacation, Out Of Office, or away messages,
>send an email to [email protected]
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>[email protected]
>=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================