DrayTek UK Users' Community Forum
Help, Advice and Solutions from DrayTek Users
V2820 "Prevent web access from IP address" does no
- lesd
- Topic Author
- Offline
- Member
-
Less
More
- Posts: 130
- Thank you received: 0
04 Nov 2009 21:41 #1
by lesd
Les
V2820 "Prevent web access from IP address" does no was created by lesd
I want to stop users from entering an IP so they are forced througn the DNS lookup at OpenDNS.
I have had this working on a V2910 and V2800 but it does not work for me on the 2820.
I have set up CSM > URL Content filter Profile > 1 >
Priority: Either: URL AC First
Enable URL Access Control is ticked
Prevent web access from IP address is ticked
Action: Block
I have tried Priority: Block Both - not better.
What have I done wrong?
I have had this working on a V2910 and V2800 but it does not work for me on the 2820.
I have set up CSM > URL Content filter Profile > 1 >
Priority: Either: URL AC First
Enable URL Access Control is ticked
Prevent web access from IP address is ticked
Action: Block
I have tried Priority: Block Both - not better.
What have I done wrong?
Les
Please Log in or Create an account to join the conversation.
- macavity
- Offline
- Member
-
Less
More
- Posts: 225
- Thank you received: 0
05 Nov 2009 00:28 #2
by macavity
Replied by macavity on topic V2820 "Prevent web access from IP address" does no
Is the CSM profile enabled in the Firewall General Setup or in a specific IP filter? If not, then it's not active. The general setup acts globally where the ip filter rules can be applied to specific local machines (via source IP)
Prevent web access from IP address will prevent users from typinghttp://ip rather than http://hostname
Eg.http://209.85.229.106 to access www.google.co.uk
As a side note, if you want to force them to use Open DNS, then you'll probably find it useful to have a firewall rule or rules that block any requests to UDP 53 (DNS) to any IP other than the OpenDNS ones in case anyone has manually changed the DNS setting on their PC.
Prevent web access from IP address will prevent users from typing
Eg.
As a side note, if you want to force them to use Open DNS, then you'll probably find it useful to have a firewall rule or rules that block any requests to UDP 53 (DNS) to any IP other than the OpenDNS ones in case anyone has manually changed the DNS setting on their PC.
Please Log in or Create an account to join the conversation.
- lesd
- Topic Author
- Offline
- Member
-
Less
More
- Posts: 130
- Thank you received: 0
05 Nov 2009 09:29 #3
by lesd
Les
Replied by lesd on topic V2820 "Prevent web access from IP address" does no
Thank you. That was it.
Thanks also for the port 53 suggestion but I am already doing that (or rather about to copy the rules from my V2910 - I hope the firewall rules setup are similar on the two boxes)
Thanks also for the port 53 suggestion but I am already doing that (or rather about to copy the rules from my V2910 - I hope the firewall rules setup are similar on the two boxes)
Les
Please Log in or Create an account to join the conversation.
- macavity
- Offline
- Member
-
Less
More
- Posts: 225
- Thank you received: 0
05 Nov 2009 12:21 #4
by macavity
Replied by macavity on topic V2820 "Prevent web access from IP address" does no
Thanks
![:) :)](/media/kunena/emoticons/3.png)
Please Log in or Create an account to join the conversation.
- colbackp
- Offline
- New Member
-
Less
More
- Posts: 7
- Thank you received: 0
07 Apr 2010 00:10 #5
by colbackp
Replied by colbackp on topic Example of DNS blocking rule
Hi
Can you please give an example of the DNS rule or rules for blocking other DNS options than OpenDNS?
When this is set, is there another way around this that users have tried to circumvent the OpenDNS route?
Thanks
Peter
Can you please give an example of the DNS rule or rules for blocking other DNS options than OpenDNS?
When this is set, is there another way around this that users have tried to circumvent the OpenDNS route?
Thanks
Peter
Please Log in or Create an account to join the conversation.
Moderators: Sami
Copyright © 2024 DrayTek