I took a look at: http://www.tek-t

[bristolxyz]

I took a look at:

http://www.tek-tips.com/viewthread.cfm?SQID=871853&SPID=35&page=1

It anwered part of the following question, but...

Part 1) What I want to do is block specific websites from access (ebay, some shopping sites, etc). I have a PIX 515, no other servers or equipment that would interfere.

Part 2) What about blocking specific file types, such as users trying to download mp3's and wmv files..?

Best regards,

Paul



CTO
MSCE, CCNA, Novell, Symantec SS

 

[snootalope]

blocking file type's is gonna be a toughy to do on the firewall, i've never heard of some being able to do that at the firewall level without some crazy ass expensive 3rd party software..

As for blocking web sites, again, without third party software, your gonna make alot of work for yourself that probably isn't going to pay off.

BUT! If you have internal DNS servers, you're in business! use the host file (root\system32\drivers\etc) on your DNS server, specifiy some bunk address, like some internal addy that doesn't work (eg. 127.0.0.1) and set it like so inside the file:

127.0.0.1

http://www.ebay.com

127.0.0.1

http://www.pornforeveryone.com

127.0.0.1

http://www.shoppersdelight.com

you get the idea... good luck

snoots

 

[bristolxyz]

Great idea! Thanks snoots

CTO
MSCE, CCNA, Novell, Symantec SS