Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual

Page 151

Advertising
background image

12.2 URL Rules

151

(wildcard matching) to substitute any number of characters (i.e. *.kerio.com*)
Server names represent any URL at a corresponding server (www.kerio.com/*).

is in URL group — selection of a URL group (refer to chapter

14.4

) which the URL

should match with

is rated by Kerio Web Filter rating system — the rule will be applied on all pages

matched with a selected category by the Kerio Web Filter module.

Click on the Select Rating... button to select from Kerio Web Filter categories. For

details, refer to chapter

12.3

.

is any URL where server is given as IP address — by enabling this option users

will not be able to bypass URL based filters by connecting to Web sites by IP

address rather than domain name. This trick is often used by servers offering

illegal downloads.

Warning

If access to servers specified by IP addresses is not denied, users can bypass URL

rules where servers are specified by names.

Action

Selection of an action that will be taken whenever a user accesses a URL meeting a rule:

Allow access to the Web site

Deny access to the Web site — requested page will be blocked. The user will be

informed that the access is denied or a blank page will be displayed (according

to settings in the Advanced tab — see below).

Tick the Log option to log all pages meeting this rule in the Filter log (see chapter

22.9

).

Go to the Advanced tab to define more conditions for the rule or/and to set options for denied

pages.

Valid at time interval

Selection of the time interval during which the rule will be valid (apart from this inter-

val the rule will be ignored). Use the Edit button to edit time intervals (for details see

chapter

14.2

).

Valid for IP address group

Selection of IP address group on which the rule will be applied. Client (source) addresses

are considered. Use the Any option to make the rule independent of clients.

Click on the Edit button to edit IP groups (for details see chapter

14.1

).

Valid if MIME type is

The rule will be valid for a certain MIME type only (for example, text/html — HTML

documents, image/jpeg — images in the JPEG format, etc.).

You can either select one of the predefined MIME types or define a new one. An asterisk

substitutes any subtype (i.e. image/*). An asterisk stands for any MIME type — the rule
will be independent of the MIME type.

Advertising