Search found 18 matches

by VeeDub
Thu May 03, 2012 3:41 am
Forum: WFilter ICF
Topic: Activity being reported on real-time blocking after the application has been closed on the target
Replies: 10
Views: 19650

Activity being reported on real-time blocking after the application has been closed on the target

I've installed Wireshark. To obtain details on the 'unknown' traffic being reported by WFilter should I just run a trace and send it to you? Or are there some filters that I can apply? Is it possible for me to do some of the analysis? I ran a trace on the internal NIC for 1 minute and the size of th...
by VeeDub
Wed May 02, 2012 11:16 pm
Forum: WFilter ICF
Topic: Blocking of https sites
Replies: 12
Views: 24314

Blocking of https sites

gengw2000 wrote: We tested untangle 9.2 version to block https websites, however, it also displays a broken connection for blocked https websites. Can you tell me how to make untangle to display a denial page for https websites? It appears that you're correct. I had been running a trial of Untangle ...
by VeeDub
Wed May 02, 2012 7:35 am
Forum: WFilter ICF
Topic: Activity being reported on real-time blocking after the application has been closed on the target
Replies: 10
Views: 19650

Activity being reported on real-time blocking after the application has been closed on the target

It's reported as unknown (and I'm blocking unknown). So presumably I need wireshark to run a trace. Are the instructions self-explanatory or is there a procedure that you would prefer me to follow?
by VeeDub
Wed May 02, 2012 6:33 am
Forum: WFilter ICF
Topic: Activity being reported on real-time blocking after the application has been closed on the target
Replies: 10
Views: 19650

Activity being reported on real-time blocking after the application has been closed on the target

gengw2000 wrote: If you have edonkey/emule running, WFilter will over blocking some unknown traffic. For no blocking of teamviewer, please add the teamviewer protocol into "Customize Protocols" of WFilter. Then it will not be over blocked. Check this blog topic: http://blog.imfirewall.us/How+To+Bloc...
by VeeDub
Wed May 02, 2012 6:19 am
Forum: WFilter ICF
Topic: Blocking of https sites
Replies: 12
Views: 24314

Blocking of https sites

Some additional info regarding https://www.facebook.com



When the site is not blocked, on Current Activity there is Protocol unknown Summary blocked.
by VeeDub
Wed May 02, 2012 3:43 am
Forum: WFilter ICF
Topic: How to define port 26
Replies: 1
Views: 4925

How to define port 26

Hello



On this network we use TCP 26 for SMTP as well as port 25.



I assume that I need to define TCP 26 as a custom protocol.



I would appreciate advice on the syntax required.



Thanks



VW
by VeeDub
Wed May 02, 2012 3:25 am
Forum: WFilter ICF
Topic: Blocking of https sites
Replies: 12
Views: 24314

Blocking of https sites

gengw2000 wrote: WFilter is not able to inject a denial page into a HTTPS section because HTTPS traffic is encrypted, so it just terminate the connections. So far we have no solution to display denial pages to https access yet. Well Untangle are able to provide a denial page for both http and https ...
by VeeDub
Wed May 02, 2012 3:08 am
Forum: WFilter ICF
Topic: Blocking of https sites
Replies: 12
Views: 24314

Blocking of https sites

gengw2000 wrote: WFilter is not able to inject a denial page into a HTTPS section because HTTPS traffic is encrypted, so it just terminate the connections. So far we have no solution to display denial pages to https access yet. If you can establish that you need to block a https page, could you redi...
by VeeDub
Wed May 02, 2012 3:03 am
Forum: WFilter ICF
Topic: Blocking of https sites
Replies: 12
Views: 24314

Blocking of https sites

gengw2000 wrote: [quote=VeeDub]Hello Actually, the "website category filtering" policy is also applied to https websites in current version of WFilter. If you find any questions, please let me know. I am observing the following: http://www.youtube.com always blocked http://www.facebook.com always bl...
by VeeDub
Wed May 02, 2012 2:34 am
Forum: WFilter ICF
Topic: Activity being reported on real-time blocking after the application has been closed on the target
Replies: 10
Views: 19650

Activity being reported on real-time blocking after the application has been closed on the target

Actually I think there is a third possibility. It looks to me as if TeamViewer (TeamViewer 7) is being identified as Edonkey,Emule and that's why I had all those entries in the logs after I had closed Emule. Everytime I switch from the Default blocking policy to High on my computer, TeamViewer stops...

Go to advanced search