You can always rely on a "domain" object (veeeerrrrry slow), or create an http ressource (matching on "host").
Both are appliable, both are really ressource greedy Domain : From_Your_Server --> Domain_to_match (HTTP) : accept With ressource : From_Your_Server --> Any (HTTP Ressource matching host) : accept Enjoy ... JF On Fri, 13 Feb 2004, Bourque Daniel wrote: > -----Message d'origine----- > De : Bourque Daniel [mailto:[EMAIL PROTECTED] > Envoy� : 5 f�vrier, 2004 23:37 > � : [EMAIL PROTECTED] > Objet : [FW-1] URL rules > > > Is it possible with NG to create rule base on a URL (Ex: MY_AV_Server > www.sybari.com http Accept log)? If yes, what would be the impact on > performance each time a packet come in and flow through that rule? > > Ex: To currently allow an Antivirus server to auto update, you have to > either give it complete HTTP access to all the internet or know in advance > the IP address of all the download servers. > > The first option is not good because if the server is compromise, the > virus/worm/spyware will have unrestricted access. The second option work > most of the time but I can't get it to work with SYBARI. > > > > Daniel Bourque > Support r�seau - Centre d'assistance technique > Loto-Qu�bec > [EMAIL PROTECTED] > (514) 499-5056 > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Jean-Francois Gobin - Administrateur gobinjf.be http://www.gobinjf.be mailto:[EMAIL PROTECTED] ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
