+ Post New Thread
Results 1 to 15 of 15
How do you do....it? Thread, Either I am stupid or ISA 2004 is! in Technical; Okay, somebody please tell me how to do this. I've been fiddling with ISA 2004 this morning and i can't ...
  1. #1

    Join Date
    Jul 2005
    Location
    Rugby
    Posts
    432
    Thank Post
    17
    Thanked 66 Times in 61 Posts
    Rep Power
    35

    Either I am stupid or ISA 2004 is!

    Okay, somebody please tell me how to do this.
    I've been fiddling with ISA 2004 this morning and i can't work out how ISA processes domain names/url's.

    Say, for instance, i want to block users access to www.foo.com, if i add that exact url to my denied sites list it will block www.foo.com or anything within i.e www.foo.com/bar etc.
    However if foo.com is configured to display the same as www.foo.com all the info is accessible via foo.com i.e foo.com/bar.
    If i add *foo.com nothing i intended is blocked, just sites such as barfoo.com.
    If i add *.foo.com www.foo.com is blocked but not foo.com.

    So, i'm asking can i block www.foo.com and foo.com by entering one domain into my denied site list?
    Every other filtering solution i have ever seen will do this, surely given everything ISA can do they can't have overlooked something quite so bloody simple!

    I tell you, if the ISA server wasn't on the other side of this site in a restricted building site i would most certainly have stabbed it with an axe by now.

    Please save my sanity somebody.

    Matt

  2. #2
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,637
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    Re: Either I am stupid or ISA 2004 is!

    Block:

    *.foo.com
    www.foo.com
    http://foo.com

  3. #3
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,637
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    Re: Either I am stupid or ISA 2004 is!

    hat last foo.com should have http:// on it

  4. #4

    Join Date
    Jul 2005
    Location
    Rugby
    Posts
    432
    Thank Post
    17
    Thanked 66 Times in 61 Posts
    Rep Power
    35

    Re: Either I am stupid or ISA 2004 is!

    Thanks mrforgetful, i know i can do that but i have enough trouble trying to type some of the ruddy awful foreign domains in the first place, i don't want to have to do it 2/3 times for every site.

    Like i said, every other filtering system i have seen can do it in one entry.

    Matt

  5. #5
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,637
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    Re: Either I am stupid or ISA 2004 is!

    It is a wee bit annoying but our LEA's Netsweeper has to have the same thing done to it too.

  6. #6

    Join Date
    Mar 2007
    Location
    The North of England
    Posts
    207
    Thank Post
    1
    Thanked 3 Times in 3 Posts
    Rep Power
    15

    Re: Either I am stupid or ISA 2004 is!

    and don't forget then they can circumvent that by finding out the ip address for www.foo.com and putting that in the browser as well!!!

  7. #7


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,461
    Thank Post
    866
    Thanked 845 Times in 667 Posts
    Rep Power
    195

    Re: Either I am stupid or ISA 2004 is!

    ctbjs: Good filters can avoid that by either blocking all IP address-only requests, or doing a reverse-dns lookup.

  8. #8

    Join Date
    Mar 2007
    Location
    The North of England
    Posts
    207
    Thank Post
    1
    Thanked 3 Times in 3 Posts
    Rep Power
    15

    Re: Either I am stupid or ISA 2004 is!

    of course .... I was just adding to Matt's frustrations!! :twisted:

  9. #9

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,529
    Thank Post
    513
    Thanked 2,406 Times in 1,862 Posts
    Blog Entries
    24
    Rep Power
    822

    Re: Either I am stupid or ISA 2004 is!

    Quote Originally Posted by tom_newton
    ctbjs: Good filters can avoid that by either blocking all IP address-only requests, or doing a reverse-dns lookup.
    We are talking about ISA 2004 here, no-one said anything about good filters

  10. #10

    Join Date
    Jul 2005
    Location
    Rugby
    Posts
    432
    Thank Post
    17
    Thanked 66 Times in 61 Posts
    Rep Power
    35

    Re: Either I am stupid or ISA 2004 is!

    So then, in summary, it's a stupid filtering solution, not be being daft.....and I should start polishing my axe?

    Everybody agree?

    Matt

  11. #11
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,637
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    Re: Either I am stupid or ISA 2004 is!

    Makes it more flexible I suppose.

    You might want to block access to the writtenessays.com site but want to let them access a subdomain of writeyourown.writtenessays.com, which you can achieve with ISA.

  12. #12

    Join Date
    Jul 2005
    Location
    Rugby
    Posts
    432
    Thank Post
    17
    Thanked 66 Times in 61 Posts
    Rep Power
    35

    Re: Either I am stupid or ISA 2004 is!

    Or it could work like i want it to and i could add writeyourown.writtenessays.com to my allow filter

    Matt

  13. #13
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,637
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    Re: Either I am stupid or ISA 2004 is!

    hehe yeh that would work too.

  14. #14

    TechMonkey's Avatar
    Join Date
    Dec 2005
    Location
    South East
    Posts
    3,282
    Thank Post
    225
    Thanked 403 Times in 300 Posts
    Rep Power
    161

    Re: Either I am stupid or ISA 2004 is!

    have you tried just foo.com. Our filter does the same but we found adding foo.com blocked the www.foo.com and foo.com. Could be the same

  15. #15

    Join Date
    Jul 2005
    Location
    Rugby
    Posts
    432
    Thank Post
    17
    Thanked 66 Times in 61 Posts
    Rep Power
    35

    Re: Either I am stupid or ISA 2004 is!

    Yes, i had tried that, infact, i spent the last 2 weeks entering sites like that. I was wondering why they weren't being filtered!
    Thanks anyway though.

    Matt

SHARE:
+ Post New Thread

Similar Threads

  1. Stupid update message
    By localzuk in forum General Chat
    Replies: 2
    Last Post: 19th July 2007, 08:56 AM
  2. Exchange - why is it so stupid?
    By DMcCoy in forum Windows
    Replies: 16
    Last Post: 12th August 2006, 09:34 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •