Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 806 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTP and Packet Filter

dsachse
I am trying to disable http/https to the internet without proxy, but it doesnt work.
I have set up a packet filter rule that allows my Proxy to do http/https to anywhere and I denied http/https for the rest. But my Users are still able to surf without using the proxy server. The transparent proxy on my ASL Box is disabled.
Any Ideas ?

Dirk


This thread was automatically locked due to age.
  • 0
    1) Remove masquerading from that box if it's not required. 

    2) Double-check you packet filtering rules. Make sure that you don't have a rule that give you user access to the external world before the rule that deny it. 

    Patrice.
  • 0 in reply to TnM
    Hi,

    1. Its enabled and I need it
    2. I checked them twice and its still not working.

    I have read something similar before here and I seems like that it is a bug or something.

    Take a look here
  • 0 in reply to dsachse
    In your iptables rule output from a shell what do you see? (iptables -Ln) or something like that.

    You can have the same output from the packet filter live log menu if I remember properly. 

    Just analyse this and find out why packets are forwarded anyway. Figure out where your deny rule are coming out with that list..

    Remember that packet will obey to the first rule listed out there.

    Patrice.
Unfiltered HTML