Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

URL blocking

Hello Sir,

I want to block 'orkut' in my network with websense, when i am trying with the same, 'gmail' also got blocked, how can i block 'orkut' with out affecting gamil by websense...

Thank You.

2 ACCEPTED SOLUTIONS

Accepted Solutions
New Member

Re: URL blocking

In Websense v6.3.2 (possibly earlier versions as well) you can block by URL Patterns. Simply place the word orkut in your policies to block and that should do it.

Worst case, you can use RegEX in your firewalls/routers and block it that way.

Re: URL blocking

Yes its better to use the pattern matching as the earlier poster described, if you do nslookup of both the google webpage and orkut, you see one very interesting thing:

> www.google.com

Non-authoritative answer:

Name: www.l.google.com

Addresses: 74.125.39.103, 74.125.39.99, 74.125.39.104, 74.125.39.147

Aliases: www.google.com

> www.orkut.com

Non-authoritative answer:

Name: orkut.l.google.com

Address: 209.85.129.85

Aliases: www.orkut.com

Compare the two A records, both contain *.google.com. So thats why websense is thinking both to be the same, both are sub-domains of the same domain.

You could also maybe put www.google.com in a White List or something.

Regards

Farrukh

2 REPLIES
New Member

Re: URL blocking

In Websense v6.3.2 (possibly earlier versions as well) you can block by URL Patterns. Simply place the word orkut in your policies to block and that should do it.

Worst case, you can use RegEX in your firewalls/routers and block it that way.

Re: URL blocking

Yes its better to use the pattern matching as the earlier poster described, if you do nslookup of both the google webpage and orkut, you see one very interesting thing:

> www.google.com

Non-authoritative answer:

Name: www.l.google.com

Addresses: 74.125.39.103, 74.125.39.99, 74.125.39.104, 74.125.39.147

Aliases: www.google.com

> www.orkut.com

Non-authoritative answer:

Name: orkut.l.google.com

Address: 209.85.129.85

Aliases: www.orkut.com

Compare the two A records, both contain *.google.com. So thats why websense is thinking both to be the same, both are sub-domains of the same domain.

You could also maybe put www.google.com in a White List or something.

Regards

Farrukh

128
Views
0
Helpful
2
Replies
CreatePlease login to create content