NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Block outgoing http on NG FP3



One way I might think of doing it is to create a couple of rules.

One to allow http or whatever ports required to the hard coded IP
addresses of the Microsoft and AV site ( might need a bit of DNS
altering locally if you have it) and the other rule generally dropping
all HTTP traffic.



Regards

Neil Kemp
Security Consultant
Business Sense IT Ltd
  _____


Suite 296, 17 Holywell Hill,
St Albans, AL1 1DT.
Å
+44 (0) 8700 201694
Ë
+44 (0) 7958 545129
Ê
07092 153679
+
[email protected]
"
http://www.businesssense.co.uk
http://www.secureadvice.co.uk


















-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]] On Behalf Of Javier
Diaz
Sent: 15 August 2003 16:00
To: [email protected]
Subject: Re: [FW-1] Block outgoing http on NG FP3

Find all the IP address of the Site windowsupdate.microsoft.com and the
Site of the antivirus, and create the rule between your net and all the
machines of the sites...

Rgds.


Javier Díaz Evans
Project Engineer
Etek International Holding Corp - Colombia
ISO 9001 certified
Tel: +57 - (1) - 622 - 7122
Fax: +57 - (1) - 257 - 1520
www.etek.com.co




Wayne Ho <[email protected]>
Sent by: Mailing list for discussion of Firewall-1
<[email protected]>
15/08/2003 09:37 a.m.
Please respond to Mailing list for discussion of Firewall-1

        To:     [email protected]
        cc:
        Subject:        [FW-1] Block outgoing http on NG FP3


Is there anyway I can just block outgoing traffic and
allow only windowsupdate.microsoft.com, and antivirus
update ? We are not using CVP, or UFP.

Thanks.

CISSP
Wayne

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.