Domain name restriction not working

[tanker135]

We are running an IP120 at a store. It's primary task is VPN back to HQ. Additionally, we need to restrict internet kiosks in the store to a closed set of destination URL's. For example: ".ibm.com". I created a group containing the domains and placed it in the destination column. With it in place, the kiosk could not browse to the restricted location, or any location. When destination is changed to "Any", the kiosk can browse to any destination. The kiosk's DNS settings are the same as the IP120's. To "fix" the problem, I did an nslookup on the sites and am restricting now by networks (of one address) rather than domain names. Any thoughts on how to fix or what is wrong?

 

[mrwalsh1]

I have the same problem. Have you resolved this?

Thanks,

~M

 

[ChrisAC]

Have you also put a rule in to allow HTTP to any other destination if the 'restricted access' rule isn't matched? Otherwise the traffic will just match the clean up rule and be dropped.

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************