Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Banning some sites for all lan ip but some
  •  
Kedryn

Messages: 10

Karma: 0
Send a private message to this user
I'm trying to ban some sites and i made a url group for them (call it "SitesToBan".

then i made a couple of adress group, one with all the lan ("AllLan"), and one with some ip adresses ("Admins")

i tried making a http policy do DENY access to "SitesToBan" from "AllLan", and then adding another policy to "SitesToBan" from the "Admins" with PERMIT.

but i didn't manage to have that working. I can't access sites from both adress groups.
how i can do that?
  •  
Kedryn

Messages: 10

Karma: 0
Send a private message to this user
forgot to tell that "AllLan" obviously contains all lan ip, including those in "Admins"
i can't really think that i have to put all lan adress in "AllLan" excluding myself, by hand, those in "Admins" (i hope you understand what i mean)
  •  
adel

Messages: 1
Karma: 0
Send a private message to this user
I have a similar problem. Did you get the solution?
Thank you.
  •  
ICT and Me

Messages: 936

Karma: 53
Send a private message to this user
The solution is to make a IP plan.
Provide those systems with rights to all site with a fixed IP.
Then those with restriced access the DHCP range.
Make two rules:
FIXED IP range - go unfiltered internet
DHCP range - go filterd internet.

ICT and Me
Carlo Turk
The Netherlands
www.ictandme.nl
Previous Topic: problem with configuring control :(
Next Topic: Vpn L2tp & winroute
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Sep 22 21:00:36 CEST 2017

Total time taken to generate the page: 0.00411 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.