I have a problem with a customer that needs to limit web browsing to a list of 
predetermined domains.  I've tried the following:

 

1.       Created domain objects and put them all together in a group, this 
didn't work because not all domains have reverse dns entries.

2.       URI of type file, this sent the CPU usage thru the roof, and caused 
the webfilter to stop working (the list is not a short one, see attached)

3.       Tried to block every category on the web filter, and include  the 
allow domains in the allowed IPs/URL

 

I'm really running out of ideas, could someone please let me know if there's 
any better way to do this?

 

Thanks,

 

Raúl

 


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
201.224.73.194  /       a
*.altavista.com         /       a
*.av.rds.yahoo.com      /       a
*.avaya.com     /       a
*.babelfish.altavista.com       /       a
*.bac.net       /       a
*.banistmo.com  /       a
*.bcontinental.com      /       a
*.bgeneral.com  /       a
*.caesarpark.com        /       a
*.cakesbyyoly.com       /       a
*.citrix.andalexgroup.com       /       a
*.compras.telefonica.com        /       a
*.copaair.com   /       a
*.cospae.org    /       a
*.countr.de     /       a
*.credomatic.com        /       a
*.critica.com   /       a
*.dealante.com  /       a
*.dell.com      /       a
*.dgi.gob.pa    /       a
*.dhl.com       /       a
*.dhl.com.pa    /       a
*.digchip.com   /       a
*.eetools.com   /       a
*.elmundo.es    /       a
*.elmundo.reverso.net   /       a
elpanamaamerica.terra.com.pa    /       a
*.pa-digital.com.pa     /       a
*.elsiglo.com   /       a
*.englishmyway.com      /       a
*.epicor.com    /       a
*.estascontratado.com   /       a
*.expedia.com   /       a
*.fedex.com     /       a
*.formaseficientes.com  /       a
*.gob.pa        /       a
*.google.com    /       a
*.grupomulticredit.com  /       a
*.hotel.com     /       a
*.hotels.com    /       a
*.hotels.gta-travel.com         /       a
*.ibepanama.com         /       a
*.ilion-strategies.com  /       a
*.inadeh.edu.pa         /       a
*.ithaka.com    /       a
*.jcm-american.com      /       a
*.jcm.com       /       a
*.konzerta.com  /       a
*.laguiahotelera.com    /       a
*.legalinfo-panama.com  /       a
*.logmein.com   /       a
*.mo4.webmail.aol.com   /       a
*.mail.google.com       /       a
*.mastrabajo.com        /       a
*.mef.gob.pa    /       a
*.microsoft.com /       a
*.mikohn.com.pe /       a
*.mipalabradiaria.com   /       a
*.multicredit.merchantreports.inf       /       a
*.paginasamarillas.com  /       a
*.panamahotelsupplies.com       /       a
*.panamatramita.gob.pa  /       a
*.payproint.com         /       a
*.prensa.com    /       a
*.produce.edu.pa        /       a
*.quetecuesta.com       /       a
*.webmailaol.com        /       a
*.radiol.net    /       a
*.registration.aol.com  /       a
*.reservhoteL.com       /       a
*.ringo.com     /       a
*.time.windows.com      /       a
*.travelcity.com        /       a
*.travelocity.com       /       a
*.travelport.com        /       a
*.unityenlinea.org      /       a
*.unityonline.org       /       a
*.us.rd.yahoo.com       /       a
*.utp.ac.pa     /       a
*.venetocasino.com      /       a
*.vtoursonline.com      /       a
*.wyndham.com   /       a

Reply via email to