Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 2333 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[7.306] Some blocked google search results

trialrider
Hi,

Sometimes links from google search like that http://www.google.de/url?sa=t&source=web&ct=res&cd=12&ved=0CA0QFjABOAo&url=http%3A%2F%2Fwww.dslteam.de%2Fforum%2Fshowthread.php%3Fp%3D2206818&rct=j&q=statische+route+w503v&ei=cIUPS8KmIpiImgOSpsnUAg&usg=AFQjCNGQ5SGsX9sZiqphUckQTi6UuxJxmQ will be blocked by our ASG and sometimes they willn't: http://www.google.de/url?sa=t&source=web&ct=res&cd=3&ved=0CBQQFjAC&url=http%3A%2F%2Fwww.administrator.de%2Findex.php%3Fmod%3Dsearch%26query%3Dsubnetz%2B%257C%2Bverbindung%2B%257C%2Brouter%2B%257C%2Bspeedport%2B%257C%2B501%26what%3Dcontents&rct=j&q=statische+routen+speedport+w+501&ei=AXwPS_eTCc6A_QaUlcw1&usg=AFQjCNGlUeaZASv12CRokl6GkpsvK4-wpw

Our ASG says it's blocked by blacklist and logfile shows "forbidden url detetcted"... But our blacklist didn't contain something from the blocked link(s). Has anyone an explanation for that? The "encryption" of the search result couldn't be the problem?
-- 
Kind regards, Steffen


This thread was automatically locked due to age.
Parents
  • 0
    What do you have in your blacklist?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Hi Bob,

    Our BL contains some different strings like "toolbar.", "desktop.", "google-analytics", "google-syndication", "adservice", "adtech", "icq", "jab", "/tor/", "boy", "girl", "q=cache" and so on. The whole list is grown in v6. There we used the web proxy in the other way. Blocking after checking the surfed URLs.

    At first I thought blocking is related to short strings like "icq" or so but searching the links ended in 0 matches.
    -- 
    MfG, Steffen
Reply
  • 0 in reply to BAlfson
    Hi Bob,

    Our BL contains some different strings like "toolbar.", "desktop.", "google-analytics", "google-syndication", "adservice", "adtech", "icq", "jab", "/tor/", "boy", "girl", "q=cache" and so on. The whole list is grown in v6. There we used the web proxy in the other way. Blocking after checking the surfed URLs.

    At first I thought blocking is related to short strings like "icq" or so but searching the links ended in 0 matches.
    -- 
    MfG, Steffen
Children
  • 0 in reply to trialrider
    Hi all,

    our ASG ist still blocking search results like in my first posting. Content filter log shows:[PHP]2009:12:09-07:08:24 (none) httpproxy[3968]: id="0062" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden url detected" action="block" method="GET" srcip="[IP]" user="" statuscode="403" cached="0" profile="profile_1" filteraction="action_REF_DefaultHTTPCFFAction" size="2797" time="2 ms" request="0xa22abea8" url="www.google.de/url
    Could it be realted to blocked category "Web Ads"? I put this to Group "Suspicious and Uncategorized" and have some blocked strings with google to like google-syndication, google-analytics, adservice...

    Hoping for help and Kind regards,

    Steffen