Chapter 12
HTTP and FTP filtering
158
for example a rule allowing access to certain pages without authentication
can be defined.
2.
Unless authentication is required, the
do not require authentication
option is
ineffective.
•
selected user(s)
— applied on selected users or/and user groups.
Click on the
Set
button to select users or groups (hold the
Ctrl
and the
Shift
keys
to select more that one user /group at once).
Note:
In rules, username represents IP address of the host fro which the user is
currently connected to the firewall (for details, see chapter
).
And URL matches criteria
Specification of URL (or URL group) on which this rule will be applied:
•
URL begins with
— this item can include either entire URL
(i.e.
www.kerio.com/index.html
) or only a substring of a URL using an asterisk
(wildcard matching) to substitute any number of characters (i.e.
*.kerio.com*
)
Server names represent any URL at a corresponding server (
www.kerio.com/*
).
•
is in URL group
— selection of a URL group (refer to chapter
) which the URL
should match with
•
is rated by ISS OrangeWeb Filter rating system
— the rule will be applied on all
pages matched with a selected category by the
ISS OrangeWeb Filter
plug-in (see
chapter
).
Click on the
Select Rating...
button to select from
ISS OrangeWeb Filter
categories.
For details, refer to chapter
.
•
is any URL where server is given as IP address
— by enabling this option users
will not be able to bypass URL based filters by connecting to Web sites by IP
address rather than domain name. This trick is often used by servers offering
illegal downloads.
Warning
If access to servers specified by IP addresses is not denied, users can bypass URL
rules where servers are specified by names.
Action
Selection of an action that will be taken whenever a user accesses a URL meeting a rule:
•
Allow access to the Web site
•
Deny access to the Web site
— requested page will be blocked. The user will be
informed that the access is denied or a blank page will be displayed (according
to settings in the
Advanced
tab — see below).
Tick the
Log
option to log all pages meeting this rule in the
Filter
log (see chapter
Summary of Contents for Firewall6
Page 1: ...Kerio WinRoute Firewall 6 Administrator s Guide Kerio Technologies...
Page 129: ...8 5 HTTP cache 129...
Page 404: ...404...
