EFW Support

Support => EFW SMTP, HTTP, SIP, FTP Proxy Support => Topic started by: milan777 on Sunday 08 March 2015, 12:28:49 am



Title: Endian 3.0 Web Filter not filtering correctly
Post by: milan777 on Sunday 08 March 2015, 12:28:49 am
I've set up Endian Firewall 3 (Community) with HTTP and HTTPS proxy. Generated and installed a Proxy certificate etc. I go to Web Filtering option, and set up Custom Black or White list. So I provided a list in Blocked sites entry like that:

.site1.com
.site2.com
.site3.com

and also tried without "." as prefix. The problem is that Web Filter in this list is filtering only site1, all other entries that I type are ignored. So it blocks only first entry. Also I tried to block all websites using "**", it didn't block anything. I installed version 2.5.2 , it didn't have that problem.

So is that a bug?


Title: Re: Endian 3.0 Web Filter not filtering correctly
Post by: dda on Tuesday 10 March 2015, 12:54:19 am
You could do this in access policy as well, remember the actual sequence is important.  Is this not something that is covered in the URL filter.  I find it to be pretty comprehensive.


Title: Re: Endian 3.0 Web Filter not filtering correctly
Post by: rmoeckli on Wednesday 11 March 2015, 09:36:24 pm
@milan777

I experienced the same thin, web filter just takes care of the first entry, I could resolve this though by adding the rule over the access policy (deny-domain). Still I think there shouldn't be such an option in web filter if it is not working!


Title: Re: Endian 3.0 Web Filter not filtering correctly
Post by: rmoeckli on Wednesday 11 March 2015, 10:10:53 pm
Another issue I'm fighting with is: in webfiler enabled the URL Filter disabled jobs and shops. But some sites still get opened by the client.

Example:
Setting in access policy: filtername all to all AD-Group allow filterprofile
opening the site jobs.ch or tchibo.ch, sites open and are not filtered by the proxy, however the used Cyren URL Check identifies them correctly in these categories. What do I need to do, to block them. Other example with some gamming sites and porn sites are workin correct.

Version of Endian uptodate on 11th march 2015 Enterprise 50, urlfilter blacklist 10 march 2015

thx


Title: Re: Endian 3.0 Web Filter not filtering correctly
Post by: rmoeckli on Wednesday 11 March 2015, 10:26:54 pm
more insight:

checked on cyren.com the following sites: tchibo.de, amazon.de, ebay.de, hm.com, mediamarkt.de

all these sites are listed in the categorie: shopping

I set up to block them but still, some get blocked some not, is there not a strict bond from efw-squid to the database of cyren?

I could open these sites: tchibo.de, hm.com, mediamarkt.de