RE: Blocking facebook and myspace



Hello April,

Thank you for posting here. Let's also thank Dillon, Leythos and Russ for
the input.

According to your description, I understand that you want to block 2 web
sites thru your SBS. If I have misunderstood the problem, please don't
hesitate to let me know.

Based on my research, we can block any web site if you install ISA server
on SBS. If you do not have ISA server, you can try Dillon's workaround.

I suggest we try the following steps to achieve your goal if you have ISA
server:

1. The SBS/ISA server should have 2 NICs, one connect to external
(Internet), and one connect to internal network. That will ensure that all
Internet access will go through ISA server and ISA will fully control the
inbound/outbound traffic.

2. Create Domain Name Sets for the 2 web sites.

Please open the ISA management console, navigate to Firewall Policy, click
Toolbox tap in right pane, select Network Objects, right-click Domain Name
Sets select New Domain Name Sets. In New Domain Name Set Policy Element
window, add all the 2 web site domains to the list (i.e. *. facebook.com
and *.myspace.com), input a name like "Blocked Web Sites", then click OK.

3. Create a access rules.

Please open the ISA management console, navigate to Firewall Policy, right
click "Firewall Policy" and click New->Access Rule, then create two new
access rules as following:

Rule name: Block 2 web sites

Rule Action: Deny

Protocols: HTTP, HTTPS

Sources: internal

Destination: Blocked Web Sites (created in step 2#)

User Sets: All Users

Then make this rule under the first rule and click Apply to save all the
settings.

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: April Henshaw <aprilfool2005@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Blocking facebook and myspace
| Date: Tue, 13 Nov 2007 21:44:53 -0800
| Organization: http://groups.google.com
| Lines: 7
| Message-ID: <1195019093.270984.293480@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 58.174.106.22
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1195019093 24438 127.0.0.1 (14 Nov 2007
05:44:53 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Wed, 14 Nov 2007 05:44:53 +0000 (UTC)
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9,gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: v29g2000prd.googlegroups.com; posting-host=58.174.106.22;
| posting-account=ps2QrAMAAAA6_jCuRt2JEIpn5Otqf_w0
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!msrtrans!
msrn-in!newshub.sdsu.edu!postnews.google.com!v29g2000prd.googlegroups.com!no
t-for-mail
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:75796
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I've been able to block youtube, mysapce (unless the user knows about
| proxies) but for facebook i can't figure that one out.
|
| Any ideas on how to accomplish this task..
|
| Thanks
|
|

.



Relevant Pages

  • RE: Web proxy returns Error code 502 (12202)
    ... Microsoft CSS Online Newsgroup Support ... Please open the ISA management console, navigate to Firewall Policy, ... cleared the web proxy cache ... For now, I will restore the ISA server settings. ...
    (microsoft.public.isa)
  • RE: Web proxy returns Error code 502 (12202)
    ... Microsoft CSS Online Newsgroup Support ... Please open the ISA management console, navigate to Firewall Policy, ... cleared the web proxy cache ... For now, I will restore the ISA server settings. ...
    (microsoft.public.isa)
  • RE: CEICW KEEPS GIVING ERRORS
    ... There are many articles and documents for ISA 2004 and SBS 2003. ... Troubleshooting Network Configuration in ISA Server 2004 ... How to configure Web publishing rules to host multiple Web sites with host ...
    (microsoft.public.windows.server.sbs)
  • Re: Access rule for Hotmail & Yahoo mail in ISA 2000 server
    ... this domain is not allow by your ISA ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ... |> Do you buy a standard ISA server 2000 copy and install it on your SBS? ...
    (microsoft.public.windows.server.sbs)
  • Re: Access rule for Hotmail & Yahoo mail in ISA 2000 server
    ... this domain is not allow by your ISA ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ... |> Do you buy a standard ISA server 2000 copy and install it on your SBS? ...
    (microsoft.public.windows.server.sbs)