Ian, if you're not using transparent mode, how about trying the following?
- Duplicate the settings in 'HTTP/S' in a Profile.
- Change 'HTTP/S' to "Transparent mode" and lock it down do that nothing gets through.
- Stop allowing 'Internal (Network) -> Websurfing -> Any' traffic with a packet filter rule.
- Watch the 'Content Filter (HTTP)' log to see what you need to unblock in 'HTTP/S'.
Still, I'm surprised that Microsoft would release a program that doesn't use the LAN settings in Internet Options.
Cheers - Bob
PS I'm glad we have brave souls like RFCat_vk to test new Microsoftware!
Ian, if you're not using transparent mode, how about trying the following?
- Duplicate the settings in 'HTTP/S' in a Profile.
- Change 'HTTP/S' to "Transparent mode" and lock it down do that nothing gets through.
- Stop allowing 'Internal (Network) -> Websurfing -> Any' traffic with a packet filter rule.
- Watch the 'Content Filter (HTTP)' log to see what you need to unblock in 'HTTP/S'.
Still, I'm surprised that Microsoft would release a program that doesn't use the LAN settings in Internet Options.
Cheers - Bob
PS I'm glad we have brave souls like RFCat_vk to test new Microsoftware!
My standard Packet filter rule is 1030:65535 - 1:65535 eg nothing below 1030 gets out without using a proxy or a special rule.
My experiments don't show anything in the http log but rejected packets for ports 80 and 443 in the PF log.
While the attached snapshot shows green packets I did that to allow my W7 PC to update. My son is actually using the W7 64 bit for his gaming PC and he is very happy with it, very reliable especially compared to my Vista 64 PC.
