Restricting web browsing

Re: Restricting web browsing

POPULAR GROUPS

more...

novell.support ... install-setup Profile…

Re: Restricting web browsing

Author: Steve Freides
Date: Jan 5, 2007 10:30

"Craig Johnson" ix.netcom.com> wrote in message
news:VA.00003820.52d49d87@ix.netcom.com...

> In article prv-forum2.provo.novell.com>, Steve
> Freides
> wrote:

>> User Group A - Can do whatever they want

>
> Give them a rule at the top of the list - A allowed to Any.

>>
>> User Group B - Can only visit approved list of sites B

>
> Put a rule next - B allowed to B sites. (This may be more than one
> rule if you
> have a long list of sites that won't fit in one rule).
>
> Optional: Follow this with a rule B denied Any.

>>
>> User Group C - Can only visit approved list of site C.

>
> Same as for B. ...

Show full article (1.51Kb)

3 Comments

Re: Restricting web browsing

Author: Craig Johnson
Date: Jan 7, 2007 13:38

In article prv-forum2.provo.novell.com>, Steve
Freides wrote:

> Thanks, Craig. Are the rules, i.e., the list of sites allowed, stored
> in a file somewhere that could be edited outside of nwadmn32/C1, etc.?
>

No, they are stored in NDS.

Except if you have LinkWall, from Connectotel. Those URL's are read from
one or more text files, and the files can have huge numbers of URL's in
them.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

no comments

Re: Restricting web browsing

Author: Craig Johnson
Date: Jan 8, 2007 10:14

In article prv-forum2.provo.novell.com>, Steve
Freides wrote:

> But the trouble is LinkWall basically wants to exclude, and I need to
> include. I can't see a way to use Linkwall to do what I need to do
> here.
>

You could use an Allow rule for Linkwall instead of Deny, but I think
LinkWall also has a whitelist option. Have a look here:
http://www.novell.com/coolsolutions/feature/7930.html

After skimming it, I'm not clear if you can run LinkWall with both allow
and deny being done at the same time, depending on the input files.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

no comments

Re: Restricting web browsing

Author: Steve Freides
Date: Jan 17, 2007 18:31

"Craig Johnson" ix.netcom.com> wrote in message
news:VA.0000383b.2453e0dc@ix.netcom.com...

> In article prv-forum2.provo.novell.com>, Steve
> Freides wrote:

>> which I don't think will deal with the SSL issue you mentioned. I
>> thought you were saying the rule would allow a wildcard that might
>> take
>> care of the http/https issue.
>>

> Sorry, I misunderstood what you were getting at there. No, you can
> only
> use HTTP in the URL rules. Put the domain name into a port 443 rule
> to
> control HTTPS sites selectively.

The port I have specified is currently "from" 443 and "to" nothing at
all, and it's working. Is that the normal and/or recommended way to
configure the rule?

TIA.

-S-

Show full article (0.92Kb)

no comments