not really, you get to define exactly where you allow the browser to go.

if you allow google.com and they click on the local google "cached" copy
link, it will be permitted because you allowed "*.google.com" - not the
actual link itself (say www.cnn.com)

quite a few ways to restrict using the pac file, via IP and domain name. The
possibilities are vast with inclusion/exclusion parameters.

here's my simple one, which basically bypass my proxy for all local browser
traffic, otherwise it gets pushed through the proxy.

function FindProxyForURL(url, host) { 

        if (shExpMatch(url,"192.168.*/*")) {return "DIRECT";}
        if (shExpMatch(url, "192.168.*:*/*")) {return "DIRECT";}

        return "PROXY 192.168.1.250:9876; DIRECT";
}


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of mark.dodge
Sent: Saturday, September 27, 2008 2:55 PM
To: hardware@hardwaregroup.com
Subject: Re: [H] White list or black list?

Using this and I allowed Google for example, they could go to every site
that Google comes up with in a search?

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alex
Sent: Saturday, September 27, 2008 3:36 PM
To: hardware@hardwaregroup.com
Subject: Re: [H] White list or black list?

Use a proxy PAC file and enforce the policy on all the machines.

http://en.wikipedia.org/wiki/Proxy_auto-config


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Joe User
Sent: Saturday, September 27, 2008 12:53 PM
To: mark.dodge
Subject: Re: [H] White list or black list?

Hello mark.dodge,

Saturday, September 27, 2008, 9:24:57 AM, you wrote:

> I need to limit which web pages multiple business computers can go to.
What
> is the file that does this? I want to limit IE to around 12 sites the
> business needs for insurance and their page and a couple of medical
research
> sites.  I've done a google on whitelist but it comes up with programs that
> can or can't be run.

You mean the HOSTS file?

-- 
Regards,
 joeuser - Still looking for the 'any' key...


Reply via email to