This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Packet Filter And Http Proxy Question

Greetings to all ...

I have set up a new firewall with the httpy proxy set to transparent, which is working well, its stopping things as it should but ..

I also have 5 hosts that I never want them to have http or https access, I set up a all the systems in group of hosts and then added a packet rule where the source is any and the desination is this group with a drop command but the hosts are still able to surf the internet.

I am not sure how the packet filter and the http proxy work together. Any help would be appeciated..

Thanks

Morgan

This thread was automatically locked due to age.

Parents

0 BarryG over 19 years ago

You'd (also) need to exclude them the http proxy settings... the proxy settings override the PF settings.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 19 years ago

You'd (also) need to exclude them the http proxy settings... the proxy settings override the PF settings.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 mhertel over 19 years ago in reply to BarryG

I added the group to the excluded list in the proxy but its still is allowing http traffic from these 5 desktops.

Any other ideas ?
Cancel
Vote Up 0 Vote Down

Cancel
0 Gert Hansen over 19 years ago in reply to mhertel

what kind of packetfilter rules do you have configured?

is there something as
Internal x Any x Any x Allow?

regards
gert
Cancel
Vote Up 0 Vote Down

Cancel
0 mhertel over 19 years ago in reply to Gert Hansen

There are some specific rules set up for SNAT settings, but at the at the very bottom, numerically the highest(9)  is
from internal network>> any service >> destination any >> allowed

The next rule up (8) is
from any source  >> any HTTP >> destination RESTRICED GRP >> Drop

The next rule up (7) is
from any source  >> any HTTPS >> destination RESTRICED GRP >> Drop

Thanks Morgan
Cancel
Vote Up 0 Vote Down

Cancel