RE: GPO that forces users to use a proxy server.

From: Jordi Molina (warper_at_eresmas.com)
Date: 10/30/04

  • Next message: Babar Shafiq Nazmi: "Re: Remove "Shutdown" command from w2k PCs but enable restart" 
    To: "'Ryan Parrish'" <RyanP@foxracing.com>
Date: Sat, 30 Oct 2004 09:58:23 +0200

    Hi all,

    Another possibility is to mix protection at network level and the GPO or by
    dhcp.

    I mean, try to set up the router(s) that connect(s) to the internet in a way
    that doesn't allow internal network packets to go out of the network and
    allow only this possibility to packets from the proxy.

    There is no use on making a GPO/dhcp rule that forces IE and MS-enabled
    applications to use the specified configuration if the user installs a
    browser like opera or mozilla, or worse, if he installs a p2p application or
    an IM client.

    If there is any application that needs another protocol to work, you can
    also use a socks-proxy for this purpose and socksify (dunno if in English is
    called on this way exactly) the application on the client side with an
    application like sockscap or eborder.

    IMO, as the protection became installed on a lower level, it's harder to
    overlap it.

    Regards!

    =================================================
    Dust surrounds you.
    warper
    www.warp3r.com
    warper@eresmas.com
    =================================================

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Babar Shafiq Nazmi: "Re: Remove "Shutdown" command from w2k PCs but enable restart"

    Relevant Pages

    • RE: Securing a Local Network
      ... How much would it cost if a virus infected one ... be if a competitor hacked into their network and was able to access all ... Third issue is virus protection. ... can infect you from numerous other sources. ...
      (Security-Basics)
    • How to debug network lockups and test /etc/network/interfaces config?
      ... etch installs" it locks up when I restart the networking, ... I had to setup a new etch install at a remote location with no DHCP server. ... course the installer prompted me to manually provide the network config info. ... On new thing I noticed as being different from sarge installs (with manual ...
      (Debian-User)
    • Re: XP Home: selective folder sharing
      ... > Explaining bridges vs NAT is not easy. ... > network are visible to all other components on each network. ... > With a bridge (if Falcon-II is providing one), ... > For protection inside the NAT router, ...
      (microsoft.public.windowsxp.network_web)
    • Re: Protection Problem Using A Network
      ... But I cannot understand why the Protection doesn't work on a file I am using ... sheet, I allocated approximately 40 rows to be used to draw up a quotation. ... of rows but cannot edit the row with the total is. ... function and allowed Everyone on our network permission to edit these rows ...
      (microsoft.public.excel.misc)
    • Re: Exchange Management Console slow
      ... So what are the odds of such a failure ... versus the cost of such protection, minus the extra downtime due to ... heartbeat network which places no impact on the production network ... Snapshots are generally not valid backups unless you're taking a VSS backup ...
      (microsoft.public.exchange.admin)