block list of Websites

[NewbieVN]

Dear All,

We have Nokia3550 and CheckPoint NG AI installed. We would like to restrict users access to Yahoo, MSN...websites. How can I do that ?
Thanks very much

 

[wirelesspeap]

you can use the following:

source = your network
destination = yahoo.com, msn.com (create objects with domain)
Service = Any
Action = Drop

Just make sure you have DNS Server entries on the Nokia
Enforcement module (i.e. when you do nslookup from
the nokia for

http://www.yahoo.com,

it can resolve to an IP address)

That's it. Simple enough

 

[NewbieVN]

Thank you very much for your prompt reply. As your instruction users will be denied when connect to

http://www.yahoo.com

but if user use mail.yahoo.com or

http://www.yahoo.com.uk

they will bypass our rules, right ? How can we deeply restrict malicious users to do that ?
Thanks in advance.

 

[wirelesspeap]

you don't. Use "yahoo.com." and it will block everything
to "yahoo.com". Use "yahoo.com.uk." and it will block
everything to yahoo.com.uk.

 

[NewbieVN]

Thank you Bro ! It works fine on my Firewall.