blocking ads with firewalls
15 years 8 months ago #29421
by S0lo
Interesting, never knew about that one
sose, you could also define fake zones in your DNS server (assuming you have one) for each one of those domains and assign them to a bogus IP address (or 172.0.0.1). This way you don't need to do it on each host file in each machine.
Pix and ASA firewalls also have URL filtering features used with Websense or N2H2 servers. NOT that I know what I'm talking about
Studying CCNP...
Ammar Muqaddas
Forum Moderator
www.firewall.cx
Replied by S0lo on topic Re: blocking ads with firewalls
When i deliver my courses on WatchGuard, i always point out that the DNS Proxy (application filter but WatchGuard call it a proxy) can be utilised to stop DNS Queries from leaving the network for sites you dont want anyone to get to. For example, you can use the DNS Proxy in WatchGuard to stop yahoo.messenger.com from being resolved and therefore stop people using it
Interesting, never knew about that one
sose, you could also define fake zones in your DNS server (assuming you have one) for each one of those domains and assign them to a bogus IP address (or 172.0.0.1). This way you don't need to do it on each host file in each machine.
Pix and ASA firewalls also have URL filtering features used with Websense or N2H2 servers. NOT that I know what I'm talking about
Studying CCNP...
Ammar Muqaddas
Forum Moderator
www.firewall.cx
Time to create page: 0.146 seconds