AVIRA ANTIVIR UNIX WEBGATE, User Manual

Page: 40 / 83

Configuration
Avira GmbH AntiVir WebGate
39
Allow
Client
Addresses
Allowing connections for certain Clients/ networks :
WebGate can activate certain Clients or networks using this option. Single Clients
are set using their IP address. A network is set typing a ’/’ and its netmask (for
example, 192.168.1.0/24).
AllowClientAddresses 127.0.0.1 192.168.0.0/16
If you do not specify any IP address, the access is not restricted.
If you specify at least one IP address, the access is permitted only to the entered IPs.
Anyone else has no access.
Forbidden
Agents
Denying access to specific user agents:
You can specify one or more user agent strings that will be denied access. The main
purpose is to avoid unnecessary traffic generated by clients issuing range requests
(such as Microsoft's BITS "Background Intelligent Transfer Service") or streaming
services (such as Apple's iTunes). Range requests and data streaming are only
permitted if specified in
AclConfigFile
(see below).
ForbiddenUserAgents BITS iTunes
Allow
Destination
Ports
Allowing connections for certain ports:
WebGate can limit the connections to certain destination ports, using this option.
You may specify domains with a hyphen.
AllowDestinationPorts 21 80 1025-65535
If you do not specify any ports, the access is not restricted.
If you specify at least one port, the access is permitted only on the entered ports. Any
other port has no access.
AclConfigFile Access control scheme:
WebGate can also support more complex rules by implementing a Squid-like access
control scheme. To use the access control scheme you must create a new
configuration file containing the rules describing the desired behavior and have
AclConfigFile contain the path to it. The syntax supported by the access control
scheme is described in the Manual.
AclConfigFile /etc/avwebgate.acl
WSLicense
Ticket
License for the Avira Web Access and Content Control library. This is used for
library authentication. This option and both WSKeyFile and WSBlockCategories
must be set in order to use the URL filtering capabilities of WebGate.
WSLicenseTicket NNNN-NNNN-NNNN-NNNN
WSKeyFile Key file used by Avira Web Access and Content Control library to encrypt traffic.
This option and both WSLicenseTicket and WSBlockCategories must be set in
order to use the URL filtering capabilities of WebGate.
WSKeyFile /usr/lib/AntiVir/wskeyfile
WSBlock
Categories
URL filtering:
This option and both WSKeyFile and WSLicenseTicket must be set in order to use
the URL filtering capabilities of WebGate.
Note: For a list of all categories please consult the Manual.
WSBlockCategories 0-2 12 14 61