Re: [fw-wiz]:blocking users from using internet, but only email

["Paul D. Robertson" <proberts () patriot net>]

On Sun, 2 Feb 2003, Hilal Hussein wrote:

> Q1:
> how can i block some users from access the internet, but still
> access the email (not only internal, but also external: sending to
> hotmail and other internet email system). ?

This depends on the firewall.  Some firewalls allow you to force users to 
authenticate prior to using them, and provide rules for groups of users.  
In that case, you'd want to create a group that's allowed to visit 
specific sites and not allowed to access any others.  Your firewall vendor 
should be able to assist in doing this for whichever firewall you have.

> Q2: how can i block users from sending  emails from microsoft outlook to the 
> internet email systems like hotmail , and yahoo, .... ?
> I am sorry if i am not clear, since i am not too much technical, even i
> am trying from time to time to get some good technical information.

You don't say what mail system you're using.  If it's Exchange, perhaps 
someone else can answer if there's a native way to do this.  Third party 
content filtering products also probably have an easy method, but require 
purchasing an additional product.  In Unix-based mail transfer agents 
like Postfix, this is a trivial task.

Why not simply make a policy, distribute it, log all traffic and give the 
offenders one warning?  If they continue to ignore the policy, then take 
appropriate administrative action.


Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
proberts () patriot net      which may have no basis whatsoever in fact."
probertson () trusecure com Director of Risk Assessment TruSecure Corporation

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards