|
|
Our Hot Pick: Rising Antivirus 2006 - Certified by TUV & Checkmark! Get 10% discount by entering this coupon code: ONDISCOUNT10
I wish to block a single website for one user only on our network. Can anyone
tell me who or where I should start.
First I would like to generate a report of abuse before blocking the site
entirely. Is ther a script or a report in SBS that I can use to track all
activity on this webpage?
Thanks,
Greg
|
|
Do you have ISA 2004 installed? If so you can do this. If not it is more
difficult.
"GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
[Quoted Text] >I wish to block a single website for one user only on our network. Can
>anyone
> tell me who or where I should start.
>
> First I would like to generate a report of abuse before blocking the site
> entirely. Is ther a script or a report in SBS that I can use to track all
> activity on this webpage?
>
> Thanks,
> Greg
|
|
Are you running any kind of proxy software such as ISA Server 2004?
If not, the answer to all your questions right now is no
--
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues
"GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
[Quoted Text] >I wish to block a single website for one user only on our network. Can
>anyone
> tell me who or where I should start.
>
> First I would like to generate a report of abuse before blocking the site
> entirely. Is ther a script or a report in SBS that I can use to track all
> activity on this webpage?
>
> Thanks,
> Greg
|
|
GTP wrote:
[Quoted Text] > I wish to block a single website for one user only on our network. Can anyone
> tell me who or where I should start.
It's best done by a firewall/proxy, but one simple way is to blackhole
the site by creating a bogus entry in
%systemroot%/system32/drivers/etc/hosts such as:
127.0.0.1 www.bannedsite.com
Since the hosts file is always looked up first when resolving names, it
effectively overrides the true IP from DNS.
If the user has Admin rights and enough savvy they can obviously modify
this.
>
> First I would like to generate a report of abuse before blocking the site
> entirely. Is ther a script or a report in SBS that I can use to track all
> activity on this webpage?
You need a proxy or a logging firewall to do this.
-- stephen
|
|
You know, I'm not sure if it is running or not. I don't even know if it is
installed. Is there a way to verify so I can tell you the answer?
"Cris Hanna [SBS-MVP]" wrote:
[Quoted Text] > Are you running any kind of proxy software such as ISA Server 2004?
> If not, the answer to all your questions right now is no
>
> --
> Cris Hanna [SBS-MVP]
> -------------------------------------------------
> Microsoft MVPs
> Independent Experts (MVPs do not work for MS)
> Real World Answers
> ---------------------------------------------------------
> Please do not contact me directly regarding issues
>
> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
> >I wish to block a single website for one user only on our network. Can
> >anyone
> > tell me who or where I should start.
> >
> > First I would like to generate a report of abuse before blocking the site
> > entirely. Is ther a script or a report in SBS that I can use to track all
> > activity on this webpage?
> >
> > Thanks,
> > Greg
>
>
>
|
|
You don't know what ISA is? you don't know if it is installed or how to
check? How about checking in the Programs menu or perhaps Add/Remove
programs? Are you sure you are the Domain Administrator? If not then you may
be getting into something you don't want to.
"GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
[Quoted Text] > You know, I'm not sure if it is running or not. I don't even know if it is
> installed. Is there a way to verify so I can tell you the answer?
>
>
> "Cris Hanna [SBS-MVP]" wrote:
>
>> Are you running any kind of proxy software such as ISA Server 2004?
>> If not, the answer to all your questions right now is no
>>
>> --
>> Cris Hanna [SBS-MVP]
>> -------------------------------------------------
>> Microsoft MVPs
>> Independent Experts (MVPs do not work for MS)
>> Real World Answers
>> ---------------------------------------------------------
>> Please do not contact me directly regarding issues
>>
>> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
>> >I wish to block a single website for one user only on our network. Can
>> >anyone
>> > tell me who or where I should start.
>> >
>> > First I would like to generate a report of abuse before blocking the
>> > site
>> > entirely. Is ther a script or a report in SBS that I can use to track
>> > all
>> > activity on this webpage?
>> >
>> > Thanks,
>> > Greg
>>
>>
>>
|
|
If you look on the server, Start > All Programs > do you see ISA Server
there?
--
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues
"GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
[Quoted Text] > You know, I'm not sure if it is running or not. I don't even know if it is
> installed. Is there a way to verify so I can tell you the answer?
>
>
> "Cris Hanna [SBS-MVP]" wrote:
>
>> Are you running any kind of proxy software such as ISA Server 2004?
>> If not, the answer to all your questions right now is no
>>
>> --
>> Cris Hanna [SBS-MVP]
>> -------------------------------------------------
>> Microsoft MVPs
>> Independent Experts (MVPs do not work for MS)
>> Real World Answers
>> ---------------------------------------------------------
>> Please do not contact me directly regarding issues
>>
>> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
>> >I wish to block a single website for one user only on our network. Can
>> >anyone
>> > tell me who or where I should start.
>> >
>> > First I would like to generate a report of abuse before blocking the
>> > site
>> > entirely. Is ther a script or a report in SBS that I can use to track
>> > all
>> > activity on this webpage?
>> >
>> > Thanks,
>> > Greg
>>
>>
>>
|
|
Well, there is no mention of ISA in the Start/Program menu. So I guess it is
not installed. This shouldn't be rocket science, all I want to do is block a
user from a site, how hard can it be?
Thanks,
Greg
"SBS Rocker" wrote:
[Quoted Text] > You don't know what ISA is? you don't know if it is installed or how to
> check? How about checking in the Programs menu or perhaps Add/Remove
> programs? Are you sure you are the Domain Administrator? If not then you may
> be getting into something you don't want to.
>
>
> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
> > You know, I'm not sure if it is running or not. I don't even know if it is
> > installed. Is there a way to verify so I can tell you the answer?
> >
> >
> > "Cris Hanna [SBS-MVP]" wrote:
> >
> >> Are you running any kind of proxy software such as ISA Server 2004?
> >> If not, the answer to all your questions right now is no
> >>
> >> --
> >> Cris Hanna [SBS-MVP]
> >> -------------------------------------------------
> >> Microsoft MVPs
> >> Independent Experts (MVPs do not work for MS)
> >> Real World Answers
> >> ---------------------------------------------------------
> >> Please do not contact me directly regarding issues
> >>
> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
> >> >I wish to block a single website for one user only on our network. Can
> >> >anyone
> >> > tell me who or where I should start.
> >> >
> >> > First I would like to generate a report of abuse before blocking the
> >> > site
> >> > entirely. Is ther a script or a report in SBS that I can use to track
> >> > all
> >> > activity on this webpage?
> >> >
> >> > Thanks,
> >> > Greg
> >>
> >>
> >>
>
>
>
|
|
You need a firewall either hardware or software. ISA is a software
firewall/proxy server and it is very easy to block websites if you have it.
What are you using for a firewall?
"GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
news:C82D607C-EC39-40F1-9C3A-32E8AD655311[ at ]microsoft.com...
[Quoted Text] > Well, there is no mention of ISA in the Start/Program menu. So I guess it
> is
> not installed. This shouldn't be rocket science, all I want to do is block
> a
> user from a site, how hard can it be?
>
> Thanks,
> Greg
>
> "SBS Rocker" wrote:
>
>> You don't know what ISA is? you don't know if it is installed or how to
>> check? How about checking in the Programs menu or perhaps Add/Remove
>> programs? Are you sure you are the Domain Administrator? If not then you
>> may
>> be getting into something you don't want to.
>>
>>
>> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
>> > You know, I'm not sure if it is running or not. I don't even know if it
>> > is
>> > installed. Is there a way to verify so I can tell you the answer?
>> >
>> >
>> > "Cris Hanna [SBS-MVP]" wrote:
>> >
>> >> Are you running any kind of proxy software such as ISA Server 2004?
>> >> If not, the answer to all your questions right now is no
>> >>
>> >> --
>> >> Cris Hanna [SBS-MVP]
>> >> -------------------------------------------------
>> >> Microsoft MVPs
>> >> Independent Experts (MVPs do not work for MS)
>> >> Real World Answers
>> >> ---------------------------------------------------------
>> >> Please do not contact me directly regarding issues
>> >>
>> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> >> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
>> >> >I wish to block a single website for one user only on our network.
>> >> >Can
>> >> >anyone
>> >> > tell me who or where I should start.
>> >> >
>> >> > First I would like to generate a report of abuse before blocking the
>> >> > site
>> >> > entirely. Is ther a script or a report in SBS that I can use to
>> >> > track
>> >> > all
>> >> > activity on this webpage?
>> >> >
>> >> > Thanks,
>> >> > Greg
>> >>
>> >>
>> >>
>>
>>
>>
|
|
I used the wizard in SBS to implement the firewall. That is all I have.
"SBS Rocker" wrote:
[Quoted Text] > You need a firewall either hardware or software. ISA is a software
> firewall/proxy server and it is very easy to block websites if you have it.
> What are you using for a firewall?
>
> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> news:C82D607C-EC39-40F1-9C3A-32E8AD655311[ at ]microsoft.com...
> > Well, there is no mention of ISA in the Start/Program menu. So I guess it
> > is
> > not installed. This shouldn't be rocket science, all I want to do is block
> > a
> > user from a site, how hard can it be?
> >
> > Thanks,
> > Greg
> >
> > "SBS Rocker" wrote:
> >
> >> You don't know what ISA is? you don't know if it is installed or how to
> >> check? How about checking in the Programs menu or perhaps Add/Remove
> >> programs? Are you sure you are the Domain Administrator? If not then you
> >> may
> >> be getting into something you don't want to.
> >>
> >>
> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
> >> > You know, I'm not sure if it is running or not. I don't even know if it
> >> > is
> >> > installed. Is there a way to verify so I can tell you the answer?
> >> >
> >> >
> >> > "Cris Hanna [SBS-MVP]" wrote:
> >> >
> >> >> Are you running any kind of proxy software such as ISA Server 2004?
> >> >> If not, the answer to all your questions right now is no
> >> >>
> >> >> --
> >> >> Cris Hanna [SBS-MVP]
> >> >> -------------------------------------------------
> >> >> Microsoft MVPs
> >> >> Independent Experts (MVPs do not work for MS)
> >> >> Real World Answers
> >> >> ---------------------------------------------------------
> >> >> Please do not contact me directly regarding issues
> >> >>
> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> >> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
> >> >> >I wish to block a single website for one user only on our network.
> >> >> >Can
> >> >> >anyone
> >> >> > tell me who or where I should start.
> >> >> >
> >> >> > First I would like to generate a report of abuse before blocking the
> >> >> > site
> >> >> > entirely. Is ther a script or a report in SBS that I can use to
> >> >> > track
> >> >> > all
> >> >> > activity on this webpage?
> >> >> >
> >> >> > Thanks,
> >> >> > Greg
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>
|
|
GTP,
As much as I want to assist you I'm afraid I'm at a stand still here. You
seem to (with all due respect) lack knowledge of what a firewall is. In
order for you to "I used the wizard in SBS to implement the firewall. That
is all I have." you need a firewall. Either hardware or software and if you
do not know what you have I'm sorry I cannot help. Perhaps Cris can explain
more.
"GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
news:BDF0165A-707C-45E8-A793-9274E4C6C2F2[ at ]microsoft.com...
[Quoted Text] >I used the wizard in SBS to implement the firewall. That is all I have.
>
> "SBS Rocker" wrote:
>
>> You need a firewall either hardware or software. ISA is a software
>> firewall/proxy server and it is very easy to block websites if you have
>> it.
>> What are you using for a firewall?
>>
>> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> news:C82D607C-EC39-40F1-9C3A-32E8AD655311[ at ]microsoft.com...
>> > Well, there is no mention of ISA in the Start/Program menu. So I guess
>> > it
>> > is
>> > not installed. This shouldn't be rocket science, all I want to do is
>> > block
>> > a
>> > user from a site, how hard can it be?
>> >
>> > Thanks,
>> > Greg
>> >
>> > "SBS Rocker" wrote:
>> >
>> >> You don't know what ISA is? you don't know if it is installed or how
>> >> to
>> >> check? How about checking in the Programs menu or perhaps Add/Remove
>> >> programs? Are you sure you are the Domain Administrator? If not then
>> >> you
>> >> may
>> >> be getting into something you don't want to.
>> >>
>> >>
>> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> >> news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
>> >> > You know, I'm not sure if it is running or not. I don't even know if
>> >> > it
>> >> > is
>> >> > installed. Is there a way to verify so I can tell you the answer?
>> >> >
>> >> >
>> >> > "Cris Hanna [SBS-MVP]" wrote:
>> >> >
>> >> >> Are you running any kind of proxy software such as ISA Server 2004?
>> >> >> If not, the answer to all your questions right now is no
>> >> >>
>> >> >> --
>> >> >> Cris Hanna [SBS-MVP]
>> >> >> -------------------------------------------------
>> >> >> Microsoft MVPs
>> >> >> Independent Experts (MVPs do not work for MS)
>> >> >> Real World Answers
>> >> >> ---------------------------------------------------------
>> >> >> Please do not contact me directly regarding issues
>> >> >>
>> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> >> >> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
>> >> >> >I wish to block a single website for one user only on our network.
>> >> >> >Can
>> >> >> >anyone
>> >> >> > tell me who or where I should start.
>> >> >> >
>> >> >> > First I would like to generate a report of abuse before blocking
>> >> >> > the
>> >> >> > site
>> >> >> > entirely. Is ther a script or a report in SBS that I can use to
>> >> >> > track
>> >> >> > all
>> >> >> > activity on this webpage?
>> >> >> >
>> >> >> > Thanks,
>> >> >> > Greg
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>
|
|
With the standard version of SBS...the "basic" firewall only provides the
most basic protection. on your server, go to www.grc.com and run a program
on their called Shields UP! and find out how many ports you have open and
then be prepared for the shock
You have two options if you wish to take the kind of actions you are looking
at.
1. Upgrade to SBS Premium, which will get you ISA
OR
2. Invest in a true Hardware firewall solution, such as Sonicwall. 49.00
Linksys/Netgear routers at best buy won't do it.
--
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues
"GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
news:BDF0165A-707C-45E8-A793-9274E4C6C2F2[ at ]microsoft.com...
[Quoted Text] >I used the wizard in SBS to implement the firewall. That is all I have.
>
> "SBS Rocker" wrote:
>
>> You need a firewall either hardware or software. ISA is a software
>> firewall/proxy server and it is very easy to block websites if you have
>> it.
>> What are you using for a firewall?
>>
>> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> news:C82D607C-EC39-40F1-9C3A-32E8AD655311[ at ]microsoft.com...
>> > Well, there is no mention of ISA in the Start/Program menu. So I guess
>> > it
>> > is
>> > not installed. This shouldn't be rocket science, all I want to do is
>> > block
>> > a
>> > user from a site, how hard can it be?
>> >
>> > Thanks,
>> > Greg
>> >
>> > "SBS Rocker" wrote:
>> >
>> >> You don't know what ISA is? you don't know if it is installed or how
>> >> to
>> >> check? How about checking in the Programs menu or perhaps Add/Remove
>> >> programs? Are you sure you are the Domain Administrator? If not then
>> >> you
>> >> may
>> >> be getting into something you don't want to.
>> >>
>> >>
>> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> >> news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
>> >> > You know, I'm not sure if it is running or not. I don't even know if
>> >> > it
>> >> > is
>> >> > installed. Is there a way to verify so I can tell you the answer?
>> >> >
>> >> >
>> >> > "Cris Hanna [SBS-MVP]" wrote:
>> >> >
>> >> >> Are you running any kind of proxy software such as ISA Server 2004?
>> >> >> If not, the answer to all your questions right now is no
>> >> >>
>> >> >> --
>> >> >> Cris Hanna [SBS-MVP]
>> >> >> -------------------------------------------------
>> >> >> Microsoft MVPs
>> >> >> Independent Experts (MVPs do not work for MS)
>> >> >> Real World Answers
>> >> >> ---------------------------------------------------------
>> >> >> Please do not contact me directly regarding issues
>> >> >>
>> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> >> >> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
>> >> >> >I wish to block a single website for one user only on our network.
>> >> >> >Can
>> >> >> >anyone
>> >> >> > tell me who or where I should start.
>> >> >> >
>> >> >> > First I would like to generate a report of abuse before blocking
>> >> >> > the
>> >> >> > site
>> >> >> > entirely. Is ther a script or a report in SBS that I can use to
>> >> >> > track
>> >> >> > all
>> >> >> > activity on this webpage?
>> >> >> >
>> >> >> > Thanks,
>> >> >> > Greg
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>
|
|
Ok, I really appreciate your help. When it comes to erros and small
implements or just keeping the company running I can handle that, but when it
gets into more complex situations I am at a standstill and need to seek help,
since we are a small family owned company and I not only do the IT but
several, several other things.
Again, I appreciate it.
Greg
"Cris Hanna [SBS-MVP]" wrote:
[Quoted Text] > With the standard version of SBS...the "basic" firewall only provides the
> most basic protection. on your server, go to www.grc.com and run a program
> on their called Shields UP! and find out how many ports you have open and
> then be prepared for the shock
>
> You have two options if you wish to take the kind of actions you are looking
> at.
> 1. Upgrade to SBS Premium, which will get you ISA
> OR
> 2. Invest in a true Hardware firewall solution, such as Sonicwall. 49.00
> Linksys/Netgear routers at best buy won't do it.
>
> --
> Cris Hanna [SBS-MVP]
> -------------------------------------------------
> Microsoft MVPs
> Independent Experts (MVPs do not work for MS)
> Real World Answers
> ---------------------------------------------------------
> Please do not contact me directly regarding issues
>
> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> news:BDF0165A-707C-45E8-A793-9274E4C6C2F2[ at ]microsoft.com...
> >I used the wizard in SBS to implement the firewall. That is all I have.
> >
> > "SBS Rocker" wrote:
> >
> >> You need a firewall either hardware or software. ISA is a software
> >> firewall/proxy server and it is very easy to block websites if you have
> >> it.
> >> What are you using for a firewall?
> >>
> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> news:C82D607C-EC39-40F1-9C3A-32E8AD655311[ at ]microsoft.com...
> >> > Well, there is no mention of ISA in the Start/Program menu. So I guess
> >> > it
> >> > is
> >> > not installed. This shouldn't be rocket science, all I want to do is
> >> > block
> >> > a
> >> > user from a site, how hard can it be?
> >> >
> >> > Thanks,
> >> > Greg
> >> >
> >> > "SBS Rocker" wrote:
> >> >
> >> >> You don't know what ISA is? you don't know if it is installed or how
> >> >> to
> >> >> check? How about checking in the Programs menu or perhaps Add/Remove
> >> >> programs? Are you sure you are the Domain Administrator? If not then
> >> >> you
> >> >> may
> >> >> be getting into something you don't want to.
> >> >>
> >> >>
> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> >> news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
> >> >> > You know, I'm not sure if it is running or not. I don't even know if
> >> >> > it
> >> >> > is
> >> >> > installed. Is there a way to verify so I can tell you the answer?
> >> >> >
> >> >> >
> >> >> > "Cris Hanna [SBS-MVP]" wrote:
> >> >> >
> >> >> >> Are you running any kind of proxy software such as ISA Server 2004?
> >> >> >> If not, the answer to all your questions right now is no
> >> >> >>
> >> >> >> --
> >> >> >> Cris Hanna [SBS-MVP]
> >> >> >> -------------------------------------------------
> >> >> >> Microsoft MVPs
> >> >> >> Independent Experts (MVPs do not work for MS)
> >> >> >> Real World Answers
> >> >> >> ---------------------------------------------------------
> >> >> >> Please do not contact me directly regarding issues
> >> >> >>
> >> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> >> >> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
> >> >> >> >I wish to block a single website for one user only on our network.
> >> >> >> >Can
> >> >> >> >anyone
> >> >> >> > tell me who or where I should start.
> >> >> >> >
> >> >> >> > First I would like to generate a report of abuse before blocking
> >> >> >> > the
> >> >> >> > site
> >> >> >> > entirely. Is ther a script or a report in SBS that I can use to
> >> >> >> > track
> >> >> >> > all
> >> >> >> > activity on this webpage?
> >> >> >> >
> >> >> >> > Thanks,
> >> >> >> > Greg
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>
|
|
Well, it seems pretty secure juding by the website you gave me. The only open
ports are:
25, 80, and 443
I will investigate further. We have no credit card information on our server
so that is good.
"Cris Hanna [SBS-MVP]" wrote:
[Quoted Text] > With the standard version of SBS...the "basic" firewall only provides the
> most basic protection. on your server, go to www.grc.com and run a program
> on their called Shields UP! and find out how many ports you have open and
> then be prepared for the shock
>
> You have two options if you wish to take the kind of actions you are looking
> at.
> 1. Upgrade to SBS Premium, which will get you ISA
> OR
> 2. Invest in a true Hardware firewall solution, such as Sonicwall. 49.00
> Linksys/Netgear routers at best buy won't do it.
>
> --
> Cris Hanna [SBS-MVP]
> -------------------------------------------------
> Microsoft MVPs
> Independent Experts (MVPs do not work for MS)
> Real World Answers
> ---------------------------------------------------------
> Please do not contact me directly regarding issues
>
> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> news:BDF0165A-707C-45E8-A793-9274E4C6C2F2[ at ]microsoft.com...
> >I used the wizard in SBS to implement the firewall. That is all I have.
> >
> > "SBS Rocker" wrote:
> >
> >> You need a firewall either hardware or software. ISA is a software
> >> firewall/proxy server and it is very easy to block websites if you have
> >> it.
> >> What are you using for a firewall?
> >>
> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> news:C82D607C-EC39-40F1-9C3A-32E8AD655311[ at ]microsoft.com...
> >> > Well, there is no mention of ISA in the Start/Program menu. So I guess
> >> > it
> >> > is
> >> > not installed. This shouldn't be rocket science, all I want to do is
> >> > block
> >> > a
> >> > user from a site, how hard can it be?
> >> >
> >> > Thanks,
> >> > Greg
> >> >
> >> > "SBS Rocker" wrote:
> >> >
> >> >> You don't know what ISA is? you don't know if it is installed or how
> >> >> to
> >> >> check? How about checking in the Programs menu or perhaps Add/Remove
> >> >> programs? Are you sure you are the Domain Administrator? If not then
> >> >> you
> >> >> may
> >> >> be getting into something you don't want to.
> >> >>
> >> >>
> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> >> news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
> >> >> > You know, I'm not sure if it is running or not. I don't even know if
> >> >> > it
> >> >> > is
> >> >> > installed. Is there a way to verify so I can tell you the answer?
> >> >> >
> >> >> >
> >> >> > "Cris Hanna [SBS-MVP]" wrote:
> >> >> >
> >> >> >> Are you running any kind of proxy software such as ISA Server 2004?
> >> >> >> If not, the answer to all your questions right now is no
> >> >> >>
> >> >> >> --
> >> >> >> Cris Hanna [SBS-MVP]
> >> >> >> -------------------------------------------------
> >> >> >> Microsoft MVPs
> >> >> >> Independent Experts (MVPs do not work for MS)
> >> >> >> Real World Answers
> >> >> >> ---------------------------------------------------------
> >> >> >> Please do not contact me directly regarding issues
> >> >> >>
> >> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> >> >> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
> >> >> >> >I wish to block a single website for one user only on our network.
> >> >> >> >Can
> >> >> >> >anyone
> >> >> >> > tell me who or where I should start.
> >> >> >> >
> >> >> >> > First I would like to generate a report of abuse before blocking
> >> >> >> > the
> >> >> >> > site
> >> >> >> > entirely. Is ther a script or a report in SBS that I can use to
> >> >> >> > track
> >> >> >> > all
> >> >> >> > activity on this webpage?
> >> >> >> >
> >> >> >> > Thanks,
> >> >> >> > Greg
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>
|
|
Port 80 means you have an open webserver somewhere, more than likely for
connecting to RWW....
Port 80 is the most singularly attacked port on the internet.
When I'm at my server later tonight, I'll try to find the setting you can
change to close that off, so that your server only accepts https connections
for RWW
--
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues
"GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
news:711ACAE1-ECEC-4128-B5C2-1B222ACD18FD[ at ]microsoft.com...
[Quoted Text] > Well, it seems pretty secure juding by the website you gave me. The only
> open
> ports are:
> 25, 80, and 443
>
> I will investigate further. We have no credit card information on our
> server
> so that is good.
>
>
> "Cris Hanna [SBS-MVP]" wrote:
>
>> With the standard version of SBS...the "basic" firewall only provides the
>> most basic protection. on your server, go to www.grc.com and run a
>> program
>> on their called Shields UP! and find out how many ports you have open and
>> then be prepared for the shock
>>
>> You have two options if you wish to take the kind of actions you are
>> looking
>> at.
>> 1. Upgrade to SBS Premium, which will get you ISA
>> OR
>> 2. Invest in a true Hardware firewall solution, such as Sonicwall.
>> 49.00
>> Linksys/Netgear routers at best buy won't do it.
>>
>> --
>> Cris Hanna [SBS-MVP]
>> -------------------------------------------------
>> Microsoft MVPs
>> Independent Experts (MVPs do not work for MS)
>> Real World Answers
>> ---------------------------------------------------------
>> Please do not contact me directly regarding issues
>>
>> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> news:BDF0165A-707C-45E8-A793-9274E4C6C2F2[ at ]microsoft.com...
>> >I used the wizard in SBS to implement the firewall. That is all I have.
>> >
>> > "SBS Rocker" wrote:
>> >
>> >> You need a firewall either hardware or software. ISA is a software
>> >> firewall/proxy server and it is very easy to block websites if you
>> >> have
>> >> it.
>> >> What are you using for a firewall?
>> >>
>> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> >> news:C82D607C-EC39-40F1-9C3A-32E8AD655311[ at ]microsoft.com...
>> >> > Well, there is no mention of ISA in the Start/Program menu. So I
>> >> > guess
>> >> > it
>> >> > is
>> >> > not installed. This shouldn't be rocket science, all I want to do is
>> >> > block
>> >> > a
>> >> > user from a site, how hard can it be?
>> >> >
>> >> > Thanks,
>> >> > Greg
>> >> >
>> >> > "SBS Rocker" wrote:
>> >> >
>> >> >> You don't know what ISA is? you don't know if it is installed or
>> >> >> how
>> >> >> to
>> >> >> check? How about checking in the Programs menu or perhaps
>> >> >> Add/Remove
>> >> >> programs? Are you sure you are the Domain Administrator? If not
>> >> >> then
>> >> >> you
>> >> >> may
>> >> >> be getting into something you don't want to.
>> >> >>
>> >> >>
>> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> >> >> news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
>> >> >> > You know, I'm not sure if it is running or not. I don't even know
>> >> >> > if
>> >> >> > it
>> >> >> > is
>> >> >> > installed. Is there a way to verify so I can tell you the answer?
>> >> >> >
>> >> >> >
>> >> >> > "Cris Hanna [SBS-MVP]" wrote:
>> >> >> >
>> >> >> >> Are you running any kind of proxy software such as ISA Server
>> >> >> >> 2004?
>> >> >> >> If not, the answer to all your questions right now is no
>> >> >> >>
>> >> >> >> --
>> >> >> >> Cris Hanna [SBS-MVP]
>> >> >> >> -------------------------------------------------
>> >> >> >> Microsoft MVPs
>> >> >> >> Independent Experts (MVPs do not work for MS)
>> >> >> >> Real World Answers
>> >> >> >> ---------------------------------------------------------
>> >> >> >> Please do not contact me directly regarding issues
>> >> >> >>
>> >> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>> >> >> >> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
>> >> >> >> >I wish to block a single website for one user only on our
>> >> >> >> >network.
>> >> >> >> >Can
>> >> >> >> >anyone
>> >> >> >> > tell me who or where I should start.
>> >> >> >> >
>> >> >> >> > First I would like to generate a report of abuse before
>> >> >> >> > blocking
>> >> >> >> > the
>> >> >> >> > site
>> >> >> >> > entirely. Is ther a script or a report in SBS that I can use
>> >> >> >> > to
>> >> >> >> > track
>> >> >> >> > all
>> >> >> >> > activity on this webpage?
>> >> >> >> >
>> >> >> >> > Thanks,
>> >> >> >> > Greg
>> >> >> >>
>> >> >> >>
>> >> >> >>
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>
|
|
Yes, we do use RWW. Thanks for your help.
"Cris Hanna [SBS-MVP]" wrote:
[Quoted Text] > Port 80 means you have an open webserver somewhere, more than likely for
> connecting to RWW....
>
> Port 80 is the most singularly attacked port on the internet.
> When I'm at my server later tonight, I'll try to find the setting you can
> change to close that off, so that your server only accepts https connections
> for RWW
>
> --
> Cris Hanna [SBS-MVP]
> -------------------------------------------------
> Microsoft MVPs
> Independent Experts (MVPs do not work for MS)
> Real World Answers
> ---------------------------------------------------------
> Please do not contact me directly regarding issues
>
> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> news:711ACAE1-ECEC-4128-B5C2-1B222ACD18FD[ at ]microsoft.com...
> > Well, it seems pretty secure juding by the website you gave me. The only
> > open
> > ports are:
> > 25, 80, and 443
> >
> > I will investigate further. We have no credit card information on our
> > server
> > so that is good.
> >
> >
> > "Cris Hanna [SBS-MVP]" wrote:
> >
> >> With the standard version of SBS...the "basic" firewall only provides the
> >> most basic protection. on your server, go to www.grc.com and run a
> >> program
> >> on their called Shields UP! and find out how many ports you have open and
> >> then be prepared for the shock
> >>
> >> You have two options if you wish to take the kind of actions you are
> >> looking
> >> at.
> >> 1. Upgrade to SBS Premium, which will get you ISA
> >> OR
> >> 2. Invest in a true Hardware firewall solution, such as Sonicwall.
> >> 49.00
> >> Linksys/Netgear routers at best buy won't do it.
> >>
> >> --
> >> Cris Hanna [SBS-MVP]
> >> -------------------------------------------------
> >> Microsoft MVPs
> >> Independent Experts (MVPs do not work for MS)
> >> Real World Answers
> >> ---------------------------------------------------------
> >> Please do not contact me directly regarding issues
> >>
> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> news:BDF0165A-707C-45E8-A793-9274E4C6C2F2[ at ]microsoft.com...
> >> >I used the wizard in SBS to implement the firewall. That is all I have.
> >> >
> >> > "SBS Rocker" wrote:
> >> >
> >> >> You need a firewall either hardware or software. ISA is a software
> >> >> firewall/proxy server and it is very easy to block websites if you
> >> >> have
> >> >> it.
> >> >> What are you using for a firewall?
> >> >>
> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> >> news:C82D607C-EC39-40F1-9C3A-32E8AD655311[ at ]microsoft.com...
> >> >> > Well, there is no mention of ISA in the Start/Program menu. So I
> >> >> > guess
> >> >> > it
> >> >> > is
> >> >> > not installed. This shouldn't be rocket science, all I want to do is
> >> >> > block
> >> >> > a
> >> >> > user from a site, how hard can it be?
> >> >> >
> >> >> > Thanks,
> >> >> > Greg
> >> >> >
> >> >> > "SBS Rocker" wrote:
> >> >> >
> >> >> >> You don't know what ISA is? you don't know if it is installed or
> >> >> >> how
> >> >> >> to
> >> >> >> check? How about checking in the Programs menu or perhaps
> >> >> >> Add/Remove
> >> >> >> programs? Are you sure you are the Domain Administrator? If not
> >> >> >> then
> >> >> >> you
> >> >> >> may
> >> >> >> be getting into something you don't want to.
> >> >> >>
> >> >> >>
> >> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> >> >> news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
> >> >> >> > You know, I'm not sure if it is running or not. I don't even know
> >> >> >> > if
> >> >> >> > it
> >> >> >> > is
> >> >> >> > installed. Is there a way to verify so I can tell you the answer?
> >> >> >> >
> >> >> >> >
> >> >> >> > "Cris Hanna [SBS-MVP]" wrote:
> >> >> >> >
> >> >> >> >> Are you running any kind of proxy software such as ISA Server
> >> >> >> >> 2004?
> >> >> >> >> If not, the answer to all your questions right now is no
> >> >> >> >>
> >> >> >> >> --
> >> >> >> >> Cris Hanna [SBS-MVP]
> >> >> >> >> -------------------------------------------------
> >> >> >> >> Microsoft MVPs
> >> >> >> >> Independent Experts (MVPs do not work for MS)
> >> >> >> >> Real World Answers
> >> >> >> >> ---------------------------------------------------------
> >> >> >> >> Please do not contact me directly regarding issues
> >> >> >> >>
> >> >> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> >> >> >> >> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
> >> >> >> >> >I wish to block a single website for one user only on our
> >> >> >> >> >network.
> >> >> >> >> >Can
> >> >> >> >> >anyone
> >> >> >> >> > tell me who or where I should start.
> >> >> >> >> >
> >> >> >> >> > First I would like to generate a report of abuse before
> >> >> >> >> > blocking
> >> >> >> >> > the
> >> >> >> >> > site
> >> >> >> >> > entirely. Is ther a script or a report in SBS that I can use
> >> >> >> >> > to
> >> >> >> >> > track
> >> >> >> >> > all
> >> >> >> >> > activity on this webpage?
> >> >> >> >> >
> >> >> >> >> > Thanks,
> >> >> >> >> > Greg
> >> >> >> >>
> >> >> >> >>
> >> >> >> >>
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>
|
|
SBS 2003 Standard (in 2 NIC config) offers basic firewall function without
additional hard/software. Theoretically, you could give it direct ethernet
to the 'net and only the ports opened by the CEICW will be visible. It uses
RRAS NAT/firewall technology to do this.
Not that I would do this. I would have a minimum NAT router in front of ISA
or a more capable firewall device and a single NIC SBS.
"SBS Rocker" <noreply[ at ]NoDomain.com> wrote in message
news:uQ5fmrOuHHA.4844[ at ]TK2MSFTNGP04.phx.gbl...
[Quoted Text] > GTP,
> As much as I want to assist you I'm afraid I'm at a stand still here. You
> seem to (with all due respect) lack knowledge of what a firewall is. In
> order for you to "I used the wizard in SBS to implement the firewall.
> That is all I have." you need a firewall. Either hardware or software and
> if you do not know what you have I'm sorry I cannot help. Perhaps Cris can
> explain more.
>
>
> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
> news:BDF0165A-707C-45E8-A793-9274E4C6C2F2[ at ]microsoft.com...
>>I used the wizard in SBS to implement the firewall. That is all I have.
>>
>> "SBS Rocker" wrote:
>>
>>> You need a firewall either hardware or software. ISA is a software
>>> firewall/proxy server and it is very easy to block websites if you have
>>> it.
>>> What are you using for a firewall?
>>>
>>> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>>> news:C82D607C-EC39-40F1-9C3A-32E8AD655311[ at ]microsoft.com...
>>> > Well, there is no mention of ISA in the Start/Program menu. So I guess
>>> > it
>>> > is
>>> > not installed. This shouldn't be rocket science, all I want to do is
>>> > block
>>> > a
>>> > user from a site, how hard can it be?
>>> >
>>> > Thanks,
>>> > Greg
>>> >
>>> > "SBS Rocker" wrote:
>>> >
>>> >> You don't know what ISA is? you don't know if it is installed or how
>>> >> to
>>> >> check? How about checking in the Programs menu or perhaps Add/Remove
>>> >> programs? Are you sure you are the Domain Administrator? If not then
>>> >> you
>>> >> may
>>> >> be getting into something you don't want to.
>>> >>
>>> >>
>>> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>>> >> news:7FC09D09-BE26-4077-8894-97F93F71E7E3[ at ]microsoft.com...
>>> >> > You know, I'm not sure if it is running or not. I don't even know
>>> >> > if it
>>> >> > is
>>> >> > installed. Is there a way to verify so I can tell you the answer?
>>> >> >
>>> >> >
>>> >> > "Cris Hanna [SBS-MVP]" wrote:
>>> >> >
>>> >> >> Are you running any kind of proxy software such as ISA Server
>>> >> >> 2004?
>>> >> >> If not, the answer to all your questions right now is no
>>> >> >>
>>> >> >> --
>>> >> >> Cris Hanna [SBS-MVP]
>>> >> >> -------------------------------------------------
>>> >> >> Microsoft MVPs
>>> >> >> Independent Experts (MVPs do not work for MS)
>>> >> >> Real World Answers
>>> >> >> ---------------------------------------------------------
>>> >> >> Please do not contact me directly regarding issues
>>> >> >>
>>> >> >> "GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
>>> >> >> news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
>>> >> >> >I wish to block a single website for one user only on our
>>> >> >> >network.
>>> >> >> >Can
>>> >> >> >anyone
>>> >> >> > tell me who or where I should start.
>>> >> >> >
>>> >> >> > First I would like to generate a report of abuse before blocking
>>> >> >> > the
>>> >> >> > site
>>> >> >> > entirely. Is ther a script or a report in SBS that I can use to
>>> >> >> > track
>>> >> >> > all
>>> >> >> > activity on this webpage?
>>> >> >> >
>>> >> >> > Thanks,
>>> >> >> > Greg
>>> >> >>
>>> >> >>
>>> >> >>
>>> >>
>>> >>
>>> >>
>>>
>>>
>>>
>
>
|
|
If you want to "BLOCK" a website for that user
Just edit the HOST file on the PC
Odd's are they don't know how to edit it.
Just redirect the domain to resolve to 127.0.0.1
Russ
--
Russell Grover
SBITS.Biz
Microsoft Certified Small Business Specialist.
MCP, MCPS, MCNPS, (MCP-SBS)
support [ at ] SBITS.Biz
Remote SBS2003 Support
http://www.SBITS.Biz
"GTP" <GTP[ at ]discussions.microsoft.com> wrote in message
news:B3EA94E5-720D-4299-8AE6-0CD8BEA01560[ at ]microsoft.com...
[Quoted Text] >I wish to block a single website for one user only on our network. Can
>anyone
> tell me who or where I should start.
>
> First I would like to generate a report of abuse before blocking the site
> entirely. Is ther a script or a report in SBS that I can use to track all
> activity on this webpage?
>
> Thanks,
> Greg
|
|
Oh sorry I didn't see you recommending the HOST file edit..
Hey' it's quick easy and it works.
Russ
--
Russell Grover
SBITS.Biz
Microsoft Certified Small Business Specialist.
MCP, MCPS, MCNPS, (MCP-SBS)
support [ at ] SBITS.Biz
Remote SBS2003 Support
http://www.SBITS.Biz
"stephen" <stephen[ at ]nospam.nodomain> wrote in message
news:emeQYwNuHHA.4916[ at ]TK2MSFTNGP04.phx.gbl...
[Quoted Text] > GTP wrote:
>> I wish to block a single website for one user only on our network. Can
>> anyone tell me who or where I should start.
>
> It's best done by a firewall/proxy, but one simple way is to blackhole the
> site by creating a bogus entry in %systemroot%/system32/drivers/etc/hosts
> such as:
>
> 127.0.0.1 www.bannedsite.com
>
> Since the hosts file is always looked up first when resolving names, it
> effectively overrides the true IP from DNS.
>
> If the user has Admin rights and enough savvy they can obviously modify
> this.
>
>>
>> First I would like to generate a report of abuse before blocking the site
>> entirely. Is ther a script or a report in SBS that I can use to track all
>> activity on this webpage?
>
> You need a proxy or a logging firewall to do this.
>
> -- stephen
|
|
|